In 2003 the European Commission supported RAND Europe in the development of a Handbook that provided an easy-to-use guide matching technical descriptions of incidents to the legal framework of the country in question and details procedures for working with law enforcement to respond to incidents. This handbook was tailored to the user requirements of Europe’s Computer Emergency Response Team (CERT) and Computer Security Incident Response Team (CSIRT) community. RAND Europe and Lawfort, a Belgian law firm, compiled the 2005 edition of the CSIRT Legal Handbook. This edition represents a significant update, taking into account recent developments in national legal frameworks and extending its scope to cover the 10 new EU member states that joined in 2004. The project to update the Handbook revisited the incident taxonomy, reviewed and analysed standard enquires and reporting needs, surveyed national legal frameworks and relevant industrial initiatives and finally provided an electronic easy-to-use online and CD-ROM-based application for modifying and updating the information, available at www.csirt-handbook.org.uk. The 2005 CSIRT Legal Handbook is globally unique in the field of information security as it provides access to a comprehensive and up-to-date collection of information on rules, regulations and laws concerning computer misuse. In addition, it also details collection and reporting of computer evidence currently in force in all 25 EU countries, together with guidelines as to when and how law enforcement must be informed of incidents.