The conventional wisdom on cyber-security is to play defense and respond quickly to breaches. But can your organization be proactive?

Perhaps it is extreme to pay “white hat” hackers to probe vulnerabilities in your organization’s computer network. Or to pay for a monthly report that tells you whether any of your employees’ passwords or personal information is being bought and sold on the “dark Web.” Or to ask “hard questions” of each and every one of your third-party suppliers.

Aaron Nicodemus is the Editor-in-Chief of Compliance Week. He previously worked as a reporter for Bloomberg Law and as business editor at the Telegram & Gazette in Worcester, Mass. Email: aaron.nicodemus@complianceweek.com LinkedIn:...