Security News > 2022 > August > New Traffic Light Protocol standard released after five years
The Forum of Incident Response and Security Teams has published TLP 2.0, a new version of its Traffic Light Protocol standard, five years after the release of the initial version.
The TLP standard is used in the computer security incident response team community to facilitate the greater sharing of sensitive information.
In the new standard, FIRST maintains the rule that the source of information should communicate the TLP label in writing or verbally, depending on the TLP designation.
Compared to TLP 1.0, TLP 2.0 replaces the TLP:WHITE label with TLP:CLEAR and adds an additional TLP: AMBER+STRICT label to add an extra limited disclosure level within organizations.
The new standard also clarifies the previous label description to improve human readability and make it easier to understand disclosure limitations.
"If a recipient needs to share information more widely than indicated by the TLP label it came with, they must obtain explicit permission from the source," FIRST explained.