New research shows only 14% are confident they can lose access to health records for 72 hours without risk to patients