A board of directors needs to map out a crisis response, oversee it when it is put into practice, and evaluate it in the aftermath.
I have also found that some directors believe that a CEO has to be a proven operator. But CEOs do not operate businesses.