Getting the best bang for your buck: Ad hoc or pre-formed incident management teams?