“Effective crisis management starts with a plan. While every crisis is different, having a plan that provides a framework for response—and testing and practicing the plan—will allow the institution to focus on the nuances of the crisis at hand rather than routine but important details that can slow response time.”