Don’t wait for an attack to heighten cybersecurity