When evaluating their level of cybersecurity, IT departments take two general approaches — proactive and reactive. The latter is common and refers to cybersecurity efforts when and after an incident…