Proactive Versus Reactive Security Investments in the Healthcare Sector