A board of directors needs to map out a crisis response, oversee it when it is put into practice, and evaluate it in the aftermath.
