A highly disruptive incident can feel overwhelming. New guidance provides a framework for response and recovery.