Preparing for a Cyber Crisis: The ISF approach