Conduct research into either Sarbanes-Oxley or HIPAA. Present a brief description of what organizations are required to do under these laws in regard to contingency planning and business continuity. How have these laws affected the way that organizations view the need for business continuity planning? What are some of the possible consequences of not having a robust business continuity plan?