Nearly nine out of 10 small to midsize companies have inadequate or outdated disaster recovery plans. That figure, which isn't shocking if you've been around for a while, comes from a recently released survey of IT security professionals conducted by nCircle, a vendor of automated security and compliance products.