Building a Proactive Security Strategy