Proactiveness is generally not rewarded or understood by upper management. How can you look like a hero if you haven't fixed anything lately. Putting money forth to mitigate potential risks has no immediate payoff; monetarily or for image. Buy the product or resources after something bad happens, then you can fix it, then you're a hero.