Traffic Light Protocol (TLP-SIG)

Mission

TLP, originally developed to encourage information sharing with and among public and private sector security professionals in the United Kingdom, has achieved widespread adoption around the globe. In regular use by all types of CSIRTs, PSIRTs, operational trust communities, information sharing analysis organizations, government agencies, and private researchers, TLP has achieved "de facto" international standard status. The FIRST community, in consultation with other security information sharing communities, established a Standards SIG for TLP to ensure that interpretations are consistent and that TLP is leveraged appropriately and with clear expectations by all.

The FIRST TLP SIG governs the definition of TLP for the benefit of the worldwide security incident response community and its partners. The TLP SIG members standardize, translate and, as necessary, evolve the TLP in an independent, fair and transparent fashion.

Goals & Deliverables

At the 28th Annual Conference and AGM in Seoul, June 2016, the TLP SIG produced the initial draft of a common, standardized set of definitions for all Traffic Light Protocol colors in English along with clear usage guidance explaining how, when and where TLP should be used to be most effective. This draft was presented to the FIRST Board during the conference to be considered for publication as FIRST standard and hosted on the public FIRST.org website as a reference.

Beginning in 2020, the TLP-SIG began working on an update to the FIRST TLP. This update, which became TLP Version 2.0, followed the FIRST Standards Policy and was circulated for comments throughout the FIRST community and various other communities worldwide that have adopted TLP. TLP Version 2.0 was published following the 34th Annual FIRST Conference in Dublin, June 2022 - and has replaced the old version as of 1 January 2023. A panel presentation discussing the changes and process of updating TLP can be seen on FIRST's YouTube channel.

A growing number of language translations are becoming available - e-mail to tlp-sig@first.org for guidance, if you want to translate TLP into your own language.

The TLP-SIG is currently working on developing detailed use cases for TLP to serve as an appendix to the standard, as well as learning materials.

Visit the Traffic Light Protocol Definitions and Usage Guidance at www.first.org/tlp.

Chair

Request to Join