Traffic Light Protocol

<h2 id="summary-of-tlps-four-colours-and-their-meanings">Summary of TLP's four colours and their meanings</h2>
<p>There are four colors (or traffic lights):<a class="footnote-ref" id="fnref:8" href="#fn:8"><sup>8</sup></a>
</p>
<ul><li> RED  - personal for named recipients only</li></ul>
In the context of a meeting, for example, RED information is limited to those present at the meeting. The distribution of RED information will generally be via a defined list and in extreme circumstances may only be passed verbally or in person.
<ul><li> AMBER  - limited distribution</li></ul>
The recipient may share AMBER information with others within their organization and their clients, but only on a ‘<a href="/facts/Need-to-know/DoHevG3F">need-to-know</a>’ basis. The originator may be expected to specify the intended limits of that sharing.
 AMBER+STRICT , introduced in TLP version 2.0, restricts sharing to the organisation only.<a class="footnote-ref" id="fnref:9" href="#fn:9"><sup>9</sup></a>
<ul><li> GREEN  - community wide</li></ul>
Information in this category can be circulated widely within a particular community. However, the information may not be published or posted publicly on the Internet, nor released outside of the community. Note: when “community” is not defined, assume the cybersecurity/defense community.
<ul><li> CLEAR  - unlimited formerly:  WHITE  - unlimited</li></ul>
Subject to standard copyright rules, CLEAR/WHITE information may be distributed freely, without restriction.
<p>In practice, one will indicate a document's classification with the acronym "TLP", followed by a colon and classification level, for example: "TLP:RED".
</p>
<h2 id="see-also">See also</h2>
<ul><li><a href="/facts/Indicator_of_compromise/oHwlcRJX">Indicator of compromise</a></li></ul>

<h2 id="external-links">External links</h2>
<ul><li><a href="https://www.first.org/tlp">Forum of Incident Response and Security Teams</a></li>
<li><a href="http://www.us-cert.gov/tlp">U.S. Department of Homeland Security</a></li></ul>

<h2 id="references">References</h2>

<ol>
<li id="fn:1"><p>Eric Luiijf; Allard Kernkamp (March 2015). "Sharing Cyber Security Information" (PDF). Global Conference on CyberSpace 2015. Toegepast Natuurwetenschappelijk Onderzoek. Retrieved 2016-10-25.Don Stikvoort (11 November 2009). "ISTLP - Information Sharing Traffic Light Protocol" (PDF). Trusted Introducer. National Infrastructure Security Co-ordination Centre. Retrieved 2016-10-25."Development of Policies for Protection of Critical Information Infrastructures" (PDF). Organisation for Economic Co-operation and Development. Retrieved 2015-11-19."'Re: OpenSSH security advisory: cbc.adv' - MARC". Mailing list ARChive. Retrieved 2012-11-25. (alt source SecurityFocus archive entry) <a href="https://publications.tno.nl/publication/34616508/oLyfG9/luiijf-2015-sharing.pdf" target="_blank">https://publications.tno.nl/publication/34616508/oLyfG9/luiijf-2015-sharing.pdf</a> <a href="#fnref:1" class="footnote-back-ref">↩</a></p></li>
<li id="fn:2"><p>"ISO/IEC 27010:2015 [ISO/IEC 27010:2015] | Information technology — Security techniques — Information security management for inter-sector and inter-organizational communications". International Organization for Standardization/International Electrotechnical Commission. November 2015. Retrieved 2019-12-31. <a href="https://www.iso.org/standard/68427.html" target="_blank">https://www.iso.org/standard/68427.html</a> <a href="#fnref:2" class="footnote-back-ref">↩</a></p></li>
<li id="fn:3"><p>"FIRST announces Traffic Light Protocol (TLP) version 1.0". Forum of Incident Response and Security Teams. 2016-08-31. Archived from the original on 2024-06-26. Retrieved 2024-08-10. <a href="https://www.first.org/newsroom/releases/20160831" target="_blank">https://www.first.org/newsroom/releases/20160831</a> <a href="#fnref:3" class="footnote-back-ref">↩</a></p></li>
<li id="fn:4"><p>"FIRST announces Traffic Light Protocol (TLP) version 1.0". Forum of Incident Response and Security Teams. 2016-08-31. Archived from the original on 2024-06-26. Retrieved 2024-08-10. <a href="https://www.first.org/newsroom/releases/20160831" target="_blank">https://www.first.org/newsroom/releases/20160831</a> <a href="#fnref:4" class="footnote-back-ref">↩</a></p></li>
<li id="fn:5"><p>"FIRST Releases Traffic Light Protocol Version 2.0 with important updates". Forum of Incident Response and Security Teams. 2022-08-05. Archived from the original on 2024-07-21. Retrieved 2024-07-21. <a href="https://www.first.org/newsroom/releases/20220805" target="_blank">https://www.first.org/newsroom/releases/20220805</a> <a href="#fnref:5" class="footnote-back-ref">↩</a></p></li>
<li id="fn:6"><p>"Traffic Light Protocol (TLP) Definitions and Usage". CISA Central. Cybersecurity and Infrastructure Security Agency. 2022-08-16. Archived from the original on 2024-08-10. Retrieved 2024-08-10. <a href="https://www.cisa.gov/tlp" target="_blank">https://www.cisa.gov/tlp</a> <a href="#fnref:6" class="footnote-back-ref">↩</a></p></li>
<li id="fn:7"><p>"CISA Upgrades to TLP 2.0". Cybersecurity and Infrastructure Security Agency. 2022-11-01. Archived from the original on 2024-08-10. Retrieved 2024-08-10. <a href="https://www.cisa.gov/news-events/alerts/2022/11/01/cisa-upgrades-tlp-20" target="_blank">https://www.cisa.gov/news-events/alerts/2022/11/01/cisa-upgrades-tlp-20</a> <a href="#fnref:7" class="footnote-back-ref">↩</a></p></li>
<li id="fn:8"><p>"Traffic Light Protocol". Centre for Critical Infrastructure Protection. Archived from the original on 2013-02-05. Retrieved 2012-11-25. <a href="https://web.archive.org/web/20130205072939/http://ccip.govt.nz/incidents/tlp.html" target="_blank">https://web.archive.org/web/20130205072939/http://ccip.govt.nz/incidents/tlp.html</a> <a href="#fnref:8" class="footnote-back-ref">↩</a></p></li>
<li id="fn:9"><p>"FIRST Traffic Light Protocol version 2.0" (PDF). <a href="https://www.first.org/tlp/docs/tlp-a4.pdf" target="_blank">https://www.first.org/tlp/docs/tlp-a4.pdf</a> <a href="#fnref:9" class="footnote-back-ref">↩</a></p></li>
</ol>

Traffic Light Protocol open-in-new

Traffic Light Protocol