Before scanning, you must inform users (so they know about potential slowdowns), take database backups (in case the scan affects data), and inform QA/server teams (so they're aware and don't interfere). Switching off SMTP is not a standard precaution.