Have plans on paper in case of cyber-attack, firms told