The recommendations in Justin Drake's "bunker mode" post are security practices that institutions should already be following