Study: Many companies lack disaster, continuity plans