A security maturity model can help identify processes that are struggling and need to be optimized. When analyzing where an organization falls in a given security or capabilities maturity model, processes can be identified as reactive or proactive. Areas, where common security practice is to take a reactive approach, can be redesigned to follow a proactive approach.