The Traffic Light Protocol (TLP) was created in order to facilitate greater sharing of information.
TLP:RED
Not for disclosure, restricted to participants only.
Usage
- Information cannot be effectively acted upon by additional parties
- Lead to impacts on privacy, reputation, or operations (if misused)
Restriction
- May not share with any parties outside of the specific exchange, meeting, or conversation in which it was originally disclosed.
- In the context of a meeting, it is limited to those present at the meeting.
- In most circumstances, should be exchanged verbally or in person.
TLP:AMBER
Limited disclosure, restricted to participants’ organizations.
Usage
- Requires support to be effectively acted upon.
- Carries risks to privacy, reputation, or operations if shared outside of the organizations involved.
Restriction
- May only share with person who need to know the information to protect themselves or prevent further harm.
- Sources are at liberty to specify additional intended limits of the sharing (must be adhered to).
TLP:GREEN
Limited disclosure, restricted to the community.
Usage
- Information is useful for the awareness (of all participating organizations) as well as with peers
- Within the broader community or sector.
Restriction
- May share information with peers and partner organizations within their sector or community
- But not via publicly accessible channels.
- Can be circulated widely within a particular community.
- May not be released outside of the community.
TLP:WHITE
Not for disclosure, restricted to participants only.
Usage
- Information carries minimal or no foreseeable risk of misuse.
Restriction
- Subject to standard copyright rules
- Information may be distributed without restriction.