Robert Pignataro and Frank Fazio, both of Ultimate Risk Services, said smaller businesses may enact cyber defenses but many have difficulty maintaining them.