The Traffic Light Protocol (TLP) is a system that is used to identify and control how sensitive information should be shared. This type of system makes sure that there is appropriate circulation of information based on its sensitivity and the trust level of recipients.
🔴TLP: RED
Description: This type of Information is very sensitive and should be restricted to specific individuals only. So, this means that no further dissemination is permitted.
Who can know: Only those explicitly named in the original communication.
Sharing rules:
• Do not forward, copy, or share.
• Typically used in face-to -face meetings or secure channels.
• Do not email or post in any public or group forum.
🟠 TLP: AMBER
Description: Information is sensitive and should only be shared within your organization or with clients on a need-to-know basis.
Who can know: Your organization’ s staff or authorized clients.
Sharing rules:
• May be shared internally.
• Do not forward to external parties unless authorized.
• May appear in internal reports or briefings.
🟡 TLP: AMBER+STRICT
Description: A stricter version of TLP: AMBER. This type of Information should only be shared with specific people within the organization and not with clients.
Who can know: Named individuals within your organization only.
Sharing rules:
• Not for distribution to clients or external partners.
• Must remain within designated internal groups.
🟢 TLP: GREEN
Description: Information can be shared within the community, but not published publicly.
Who can know: Peers and trusted community members.
Sharing rules:
• Shareable within forums, groups, and trusted partners.
• Not for public posting or media use.
⚪️ TLP: CLEAR
Description: Recipients may share this type of Information without restrictions since it is not sensitive, and it can be shared publicly.
Who can know: Anyone.
Sharing rules:
• Free to distribute on websites, social media, blogs, news.
• No restrictions.
Reference Link:
https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage
