Most U.S. small businesses lack disaster-recovery plans