Traffic Light Protocol (TLP) 2.0 Brings Wording Improvements, Label Changes

guest · Aug 5, 2022

...brings important updates to the widely used sensitive information classification system
August 5, 2022

The Traffic Light Protocol (TLP) was established by the UK’s National Infrastructure Security Co-ordination Center (NISCC) in 1999, and FIRST released its first version of TLP in August 2016. In 2019, a special interest group comprising more than 50 industry professionals started working on improving the TLP content, language, accessibility and supporting materials. The result of their work is TLP 2.0, which FIRST officially launched on August 5, 2022.
Click to expand...

The TLP defines labels for indicating whether and how much sensitive information can be shared. The four labels are TLP:RED (for the individual recipient only), TLP:AMBER (can be distributed on a need-to-know basis with the organization and its clients), TLP:GREEN (can be shared within the community), and TLP:CLEAR (no limit on disclosure).

TLP 2.0 also includes the TLP:AMBER+Strict label, which is used for information that is restricted to the recipient’s organization only and it cannot be shared with clients.
Click to expand...

“We are increasingly spreading more confidential and sensitive information inside our community, inside companies, inside business sectors, inside countries, and worldwide,” said Don Stikvoort of the Open CSIRT Foundation, one of the people involved in the development of TLP 2.0

“We need systems that are easy to use, simple to understand, and straightforward enough that translation does not impact the meaning to ensure that we share sensitive information with the appropriate audience. The updated and modernized TLP version 2.0 does just that.”
Click to expand...

FIRST Releases Traffic Light Protocol Version 2.0 with important updates

The Forum of Incident Response and Security Team (FIRST) has updated the globally renowned Traffic Light Protocol (TLP) for the cybersecurity industry - a vital system used by organizations all around the world to share sensitive information. The new version of the TLP results from a thorough consultation with over 50 security industry experts over three years with the goals to standardize, unify and modernize the content and language and provide improved supporting materials.

Aug 05 2022 - Established in 1999 by the National Infrastructure Security Co-ordination Center (NISCC), TLP gradually became well-known globally. FIRST took the lead in unifying and standardizing the TLP in 2015. In 2019, over 50 security incident professionals re-convened the FIRST TLP Special Interest Group (FIRST TLP-SIG) to collaborate to improve the TLP in terms of content, language, supporting materials, and accessibility. After additional consultation with members from other groups and communities from around the world, FIRST finalized the new draft this year. The final TLP version 2.0 is now available for distribution and is planned to be fully adopted worldwide by January 2023.
Click to expand...

reasonablePrivacy · Aug 6, 2022

I wonder how useful would be it for private use i.e. family

guest · Aug 24, 2022

Cyware adopts Traffic Light Protocol 2.0 to enhance threat intelligence sharing capabilities
August 25, 2022

Cyware has adopted the newly launched Traffic Light Protocol (TLP) standard version 2.0 to step up threat intelligence sharing capabilities within and between organizations across the globe.

FIRST led the charge to unify and standardize the TLP in 2015. The modernized TLP version 2.0 is now available for distribution and Cyware has become one of the earliest adopters of the new standard to foster greater sharing of threat information industry-wide.
The updated standard also brings enhancements aimed at improving accessibility for non-native English speakers and providing consistent language, terminology, and definitions for the cybersecurity community.
Click to expand...

The Cyware Situational Awareness Platform (CSAP) provides enterprises and information sharing communities (ISACs/ISAOs) precise control over the sharing of sensitive threat intelligence, vulnerability, and malware advisories.

To further this objective, CSAP has integrated the TLP 2.0 standard to facilitate a modernized and reliable threat information sharing workflow. It helps define clear boundaries for information disclosure and furthers the distribution of sensitive information for cybersecurity collaboration.
Click to expand...

Cyware: Traffic Light Protocol (TLP) 2.0 Threat Intel Sharing Standard Now Available for Cyware Customers

In modern security operations, security teams and decision-makers at various levels constantly communicate and collaborate by sharing threat intelligence over various channels. This sharing of threat intelligence also occurs across organizational boundaries and poses various security risks if not managed properly. This is why the security industry adopted the Traffic Light Protocol (TLP), an easy-to-understand and useful standard to govern information disclosure practices.
Click to expand...

What is new in TLP 2.0?
The TLP 2.0 standard comprises four designations and a sub-designation. This includes:

TLP:CLEAR - No limits on disclosure.

TLP:GREEN - Limited disclosure within the community.

TLP:AMBER - Limited disclosure on a need-to-know basis within the organization and with clients.

TLP:AMBER+STRICT - Limited disclosure on a need-to-know basis only within the organization.

TLP:RED - No further disclosure beyond an individual recipient.

Click to expand...

guest · Oct 26, 2022

CISA Upgrades to Version 2.0 of Traffic Light Protocol in One Week – Join Us!
October 25, 2022

On Nov. 1, 2022, CISA will upgrade from Traffic Light Protocol (TLP) 1.0 to TLP 2.0 in accordance with the recommendation by the Forum of Incident Response Security Teams (FIRST) that organizations move to 2.0 by the end of 2022. TLP Version 2.0 brings the following key updates:

TLP:CLEAR replaces TLP:WHITE for publicly releasable information.

TLP:AMBER+STRICT supplements TLP:AMBER, clarifying when information may be shared with the recipient’s organization only.

Click to expand...

CISA encourages all network defenders and partners to upgrade to TLP Version 2.0 to facilitate greater information sharing and collaboration. For more information see:

On Nov. 1, CISA Upgrades to Traffic Light Protocol 2.0 — Join Us! by Tom Millar, Cybersecurity Senior Advisor, CISA, and Co-chair of the FIRST TLP Special Interest Group (SIG)

CISA.gov/TLP, which contains links to CISA’s TLP 2.0 User Guide and Fact Sheet

FIRST.org/TLP

Click to expand...

Log in or Sign up

Traffic Light Protocol (TLP) 2.0 Brings Wording Improvements, Label Changes

guest Guest

reasonablePrivacy Registered Member

guest Guest

guest Guest

Log in or Sign up

Traffic Light Protocol (TLP) 2.0 Brings Wording Improvements, Label Changes

guest Guest

reasonablePrivacy Registered Member

guest Guest

guest Guest

Useful Searches