Plan for the worst: how construction firms should be prepared for extortion