Business continuity planning: Identifying gaps, patterns and justifications