Your organization''s incident response program has plateaued at a reactive maturity level despite having a capable team and adequate tools. Incidents are handled competently, but the same types of incidents keep recurring, detection relies heavily on external notifications, and there is no proactive threat hunting capability. How would you transform this program from reactive to proactive, and what specific changes would drive the shift?