CISA has put some good guidance together here: https://www.cisa.gov/shields-up