Traffic Light
Traffic Light (Source: Pixabay)

The Traffic Light Protocol (TLP) was created in order to facilitate greater sharing of information. 

TLP:RED

Not for disclosure, restricted to participants only.

Usage

  • Information cannot be effectively acted upon by additional parties
  • Lead to impacts on privacy, reputation, or operations (if misused)

Restriction

  • May not share with any parties outside of the specific exchange, meeting, or conversation in which it was originally disclosed.
  • In the context of a meeting, it is limited to those present at the meeting.
  • In most circumstances, should be exchanged verbally or in person.

TLP:AMBER

Limited disclosure, restricted to participants’ organizations.

Usage

  • Requires support to be effectively acted upon.
  • Carries risks to privacy, reputation, or operations if shared outside of the organizations involved.

Restriction

  • May only share with person who need to know the information to protect themselves or prevent further harm.
  • Sources are at liberty to specify additional intended limits of the sharing (must be adhered to).

TLP:GREEN

Limited disclosure, restricted to the community.

Usage

  • Information is useful for the awareness (of all participating organizations) as well as with peers
  • Within the broader community or sector.

Restriction

  • May share information with peers and partner organizations within their sector or community
  • But not via publicly accessible channels.
  • Can be circulated widely within a particular community.
  • May not be released outside of the community.

TLP:WHITE

Not for disclosure, restricted to participants only.

Usage

  • Information carries minimal or no foreseeable risk of misuse.

Restriction

  • Subject to standard copyright rules
  • Information may be distributed without restriction.