3 rules to keep a systems crisis from taking down IT