How can states get the most bang for their disaster recovery buck?