IT Leadership Simulator: Developing Proactive and Reactive Security Plans