Security and privacy teams hit avoidable crises when they only call communications pros after incidents strike. Treat communication strategy like compound interest -- invest early in relationship-building, incident prep, and resilience before you need crisis management.