Unlike the high-profile hacking incidents at big banks, smaller institutions have their own breed of threats such as cyberextortion that they must focus on in strengthening their security.