Most organizations believe they are prepared for cyber crisis management because they have incident response plans, playbooks, and tabletop exercises. But these artifacts often fail when faced with real-world complexity. Here’s what to build instead.