The specifications of the TLP aim to ensure that the author’s intention is immediately understood: red stands for “only for you”, yellow indicates “limited distribution possible” and green means largely free distribution, at least within the security community. The TLP level relates solely to the intended confidentiality, not to copyright issues. TLP does not provide any information on how the desired confidentiality is to be ensured or on sanctions in the event of violations.
Fine-tuning at the confidentiality traffic light
The changes in version 2.0 are largely cosmetic in nature and are intended to further simplify TLP usage. The only new element is “TLP:AMBER+STRICT”, which allows redistribution only within an organization; “TLP:AMBER” includes its own customers. And TLP:CLEAR replaces the old TLP:WHITE.
The TLP levels and their meaning:
- TLP:RED – only for the individual recipient; no transfer.
- TLP: AMBER (yellow) – restricted distribution only to people who need to know within an organization. Includes disclosure to clients (“clients” in the original). TLP:AMBER+STRICT excludes customers.
- TLP:GREEN – Passing on within your own community
- TLP:CLEAR – no redistribution restriction
The FIRST TLP definitions contain further explanations of the terms and their interpretation. In addition, they also make specifications for color coding, which, however, could not be adhered to here due to limitations of the CMS (it cannot have the prescribed black background or yellow font).
