We often think of security in proactive and reactive terms. Both are needed, but proactive is always best.