D4 · Operations

What is TLP (Traffic Light Protocol)?

TLP is a framework for sharing sensitive information: TLP:RED (personal, not for sharing), TLP:AMBER (limited distribution), TLP:GREEN (community), TLP:WHITE (unlimited sharing).
TLP is standard in threat intelligence communities. ISAC members respect TLP classifications. TLP:RED = in meeting only. TLP:AMBER = organization only. TLP:GREEN = community. TLP:WHITE = public. TLP:AMBER+STRICT = your organization only (no forwarding).
← Back to Glossary Practice Questions →