Why data protection must be central to any business continuity plan