Tabletop exercises help agencies plan response and recovery following a potential cyberattack. But for these simulations to work, officials must do five things in advance.