Don't treat IT as the cure-all for a business continuity crisis, firms told