TLP.

TLP is a simple labeling scheme maintained by FIRST that signals how sensitive shared cyber information is and with whom it may be redistributed. It belongs to the Defense & Operations category of cybersecurity.

TLP is a simple labeling scheme maintained by FIRST that signals how sensitive shared cyber information is and with whom it may be redistributed.

The Traffic Light Protocol (TLP) is a non-technical, four-color marking system standardized by FIRST and used by CSIRTs, ISACs, and governments worldwide. The current TLP 2.0 levels are CLEAR (formerly WHITE — share without restriction), GREEN (community), AMBER (limited to recipients' organizations and clients on a need-to-know basis), AMBER+STRICT (recipients' organizations only), and RED (named recipients only, no further sharing). TLP does not enforce technical access controls; it establishes shared expectations so analysts can exchange sensitive information without ambiguity. Labels typically appear in document headers, STIX markings, and MISP distribution settings.

Defences for TLP typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Traffic Light Protocol, TLP 2.0.