Don’t wait for a breach to take action