rather than reactive. If measures are already in place when a cyberattack targets a company