Action vs. reaction. Knowing you cyber risks before they find you.