Traffic Light Protocol
Traffic Light Protocol: rules adopted to classify confidentiality of information and limitation on sharing the tagged information.
When shall it be used?
How may it be shared?
Sources use TLP: RED when information cannot be effectively acted upon by additional parties, and could lead to impacts on a party’s privacy, reputation, or operations if misused.
Recipients are not allowed to share TLP: RED information with any parties outside of the specific exchange, meeting, or conversation in which it is originally disclosed.
Sources use TLP: AMBER when information requires support to be effectively acted upon, but carries risks to privacy, reputation, or operations if shared outside of the organizations involved.
Recipients are allowed to share TLP: AMBER information only with members of their own organization who need to know, and only as widely as necessary to act on that information.
Sources use TLP: GREEN when information is useful for the awareness of all participating organizations as well as with peers within the broader community or sector.
Recipients are allowed to share TLP: GREEN information with peers and partner organizations within their sector or community, but not via publicly accessible channels.
Sources use TLP: WHITE when information carries minimal or no foreseeable risk of misuse, in accordance with applicable rules and procedures for public release.
TLP: WHITE information can be distributed without restriction, subject to copyright controls.