Tied to legacy infrastructure, bombarded by regulation and uncertainty over their business model, banks must also face up to the cyber security threat, writes author Stephen Norman.