TLP

The Traffic Light Protocol (TLP) is a set of rules used to classify the sensitivity of information and to determine the rules governing its further disclosure. Its aim is to enhance information security by clearly defining who may access the information and to what extent.

Basic information

TLP is based on four colour-coded categories:

  • red (TLP:RED)
  • orange (TLP:AMBER)
  • green (TLP:GREEN)
  • white (TLP:CLEAR)

The responsibility for assigning information to a specific category always lies with the sender. If the recipient wishes to pass on the information received, they should first obtain the consent of the author of the message or document.

Rules for the designation and interpretation of TLP colours

The significance of TLP colours for the sender

TLP:RED

This designation is used for information intended solely for a strictly defined group of recipients. Its disclosure to unauthorised persons may have serious consequences.

This category also includes information which, whilst not confidential in itself, relates exclusively to specific recipients. In such cases, passing it on to uninvolved persons is unjustified.

TLP:AMBER

This classification should be applied to information that may need to be passed on so that other individuals or teams can take appropriate action.

Access should always be restricted to a minimum, and information should only be shared with those who need to know it. Unauthorised disclosure may lead to the exposure of sensitive data.

It is also possible to use the TLP:AMBER+STRICT classification, which further restricts the sharing of information to a strictly defined organisation or environment.

TLP:GREEN

This classification applies to information that is generally useful to colleagues, partner organisations and other interested parties for whom such knowledge may be relevant.

Information classified as TLP:GREEN must not be published on public information channels.

TLP:CLEAR

This category is used to designate information whose use involves no risk, or only a minimal risk, of misuse. Its distribution is not subject to any restrictions (except for copyright provisions).

The significance of TLP colours for the recipient

TLP:RED

Otrzymanych informacji nie wolno przekazywać nikomu poza innymi bezpośrednimi adresatami wiadomości lub dokumentu.

TLP:AMBER

The information received must not be disclosed to anyone other than the other direct recipients of the message or document.

The sender may impose additional restrictions, which must be strictly adhered to. An example is the TLP:AMBER+STRICT designation, which restricts distribution to a specific environment.

TLP:GREEN

Information may be shared with colleagues, partner organisations and other interested parties, provided that this information is relevant to them.

However, it is prohibited to share them on public news channels.

TLP:CLEAR

There are no restrictions on the distribution of this information (except for copyright).

Color Coding

TLP labels have strictly defined colors according to the RGB palette:

  • TLP:RED – #FF2B2B text on a black background
  • TLP:AMBER – #FFC000 text on a black background
  • TLP:GREEN – #33FF00 text on a black background
  • TLP:CLEAR – white text on a black background

Document Marking

Every document should have a TLP label placed in the header of the first page, clearly indicating its category.

Email Marking

In the case of email correspondence:

  • the TLP label should be placed in the subject line of the message,
  • additionally, information about the TLP class should be included at the beginning of the message body, before the actual information.