This post and the post immediately prior are very important to understand and provide tangible substance for a lot of current concerns. Please read and be aware as you sift through all the lies on social media and in the fake news.
——
This supplemental guidance v3 requires (1) agencies that ran affected versions conduct forensic analysis, (2) agencies that accept the risk of running SolarWinds Orion comply with certain hardening requirements, and (3) reporting by agency from department-level Chief Information Officers (CIOs) by Tuesday, January 19, and Monday, January 25, 2021.
https://cyber.dhs.gov/ed/21-01/#supplemental-guidance-v3