Firms 'ill-prepared for disaster'