Security teams must move beyond proactive approaches built on periodic assessments, patch cycles and vulnerability scans — and adopt a preemptive stance that shuts down threats before exploitation occurs.