Cybersecurity is both proactive and responsive. Besides putting in place preemptive measures to deter cybercriminals, you also need an IT incident response strategy to counteract imminent threats. Think of an IR plan as a damage control measure.