Proposed EU cyber security law will require proactive network security