it’s proactive means nothing has happened yet but giving the training just in case, big companies do proactive, smaller ones do reactive but that’s not efficient
Proactive security means nothing’s happened, it’s speculative to a degree.
Figuratively, you’re trying to prevent a potential storm by building walls, drainage and other things to ensure your home survives in the case that it does happen.
It can be extremely expensive, and is the reason why smaller organisations do reactive over the obvious choice. However, big organisations always default to this, as they can’t afford to lose the data or have things leaked.