SMEs feel ready for disaster, but lack plans