If the likes of M&S can be brought low by hackers, what hope do little firms have? That’s the fear of many entrepreneurs, but they can build effective defences