Crisis management: best practices begin before disaster strikes