{"id":58840,"date":"2022-10-14T09:53:20","date_gmt":"2022-10-14T01:53:20","guid":{"rendered":"https:\/\/version-2.com\/?p=58840"},"modified":"2022-12-02T18:14:40","modified_gmt":"2022-12-02T10:14:40","slug":"firsts-traffic-light-protocol-2-0","status":"publish","type":"post","link":"https:\/\/version-2.com\/en\/2022\/10\/firsts-traffic-light-protocol-2-0\/","title":{"rendered":"FIRST’s Traffic Light Protocol 2.0"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\n

\"\"<\/p>\n\n

No, TLP is not an American girl band from the 90\u2019s. It\u2019s an acronym for Traffic Light Protocol, a method for sources to signify any limitations regarding the further spread of the information being shared.<\/p>

Meant to facilitate and simplify information exchange, TLP is widely used by Computer Security Incident Response Teams (CSIRT) within the European Union.<\/p>

For TLP, simplicity is key. Whoever is sharing information tags the document, presentation, email, phone call, or meeting in a dimly lit pub with \u201cTLP:COLOR.\u201d Yes, TLP encompasses all forms of information: written, visual, verbal and potentially telepathic.<\/p>

Recently, the Forum of Incident Response and Security Teams (FIRST) decided to update the five-year-old protocol with version 2.0, hoping to optimize it by<\/p>

– Removing \u201csynonyms and colloquialisms to improve accessibility for non-native English speakers.\u201d<\/p>

– Focusing \u201con consistent language and terminology, adding definitions for community, organization, and clients.\u201d<\/p>

– Adding \u201ca colors table to include RGB, CMYK, and hexadecimal color codes.\u201d<\/p>

– Changing TLP:WHITE to TLP:CLEAR and adding an additional \u201cStrict\u201d label to TLP:AMBER to denote information that should only be shared with the recipient\u2019s organization.<\/p>

Why the update? Well, according to Don Stikvoort, the FIRST TLP-SIG co-chair, \u201cWe are increasingly spreading more confidential and sensitive information inside our community, inside companies, inside business sectors, inside countries, and worldwide. We need systems that are easy to use, simple to understand, and straightforward enough that translation does not impact the meaning to ensure that we share sensitive information with the appropriate audience. The updated and modernized TLP version 2.0 does just that.\u201d<\/p>

Simple enough.<\/p>