Traffic Light Protocol

Purpose

The Traffic Light Protocol (TLP) is a set of designations used to ensure that sensitive information for cybersecurity alerts, events, and incidents is shared with the correct audience. TLP is for communications and not data classification. SEC-10 Incident Response Policy requires communications based on the Enterprise Incident Response Plan.

TLP employs colors (Red, Amber, Green or Clear) to indicate different degrees of sensitivity and the corresponding sharing considerations to be applied by the recipient(s). TLP designations at Washington state agencies are derived from the Cybersecurity and Infrastructure Security Agency’s Traffic Light Protocol (TLP) Definitions and Usage.