Experts advised that crisis management and recovery is as much about communications and testing as it is about technical defense measures