{"id":12669,"date":"2026-06-04T11:55:44","date_gmt":"2026-06-04T15:55:44","guid":{"rendered":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/"},"modified":"2026-06-04T12:17:53","modified_gmt":"2026-06-04T16:17:53","slug":"traffic-light-protocol","status":"publish","type":"page","link":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/","title":{"rendered":"Traffic Light Protocol"},"content":{"rendered":"
\n
\n
\n
\n
\n

Overview<\/h2>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

The Traffic Light Protocol (TLP) was created to facilitate greater information sharing. TLP is a set of designations used to ensure that sensitive information is shared with appropriate audiences.<\/p>\n

TLP uses four colors to define sharing boundaries for the recipient(s), indicating when and how sensitive information can be shared and supporting more effective collaboration. TLP is optimized for ease of adoption, human readability, and person-to-person sharing.<\/p>\n

At Trinity College, TLP may be used to help communicate the appropriate sharing boundaries for cybersecurity, privacy, risk, and operational information. It does not replace college policy, data classification requirements, legal or regulatory obligations, or other institutional handling expectations.<\/p>\n

The source is responsible for ensuring that recipients of TLP information understand and can follow TLP sharing guidance. If a recipient needs to share the information more widely than the original TLP designation allows, they must obtain explicit permission from the original source. See CISA’s Traffic Light Protocol (TLP) Definitions and Usage <\/a>for more information.<\/p>\n

Definitions<\/h3>\n
\n\n\n\n\n\n\n\n\n
Color<\/strong><\/th>\nWhen should it be used?<\/strong><\/th>\nHow may it be shared?<\/strong><\/th>\n<\/tr>\n<\/thead>\n
TLP:RED – <\/strong>Not for disclosure, restricted to participants only.\"red<\/td>\nSources may use TLP:RED when information cannot be effectively acted upon by additional parties, and could lead
\nto impacts on a party\u2019s privacy, reputation, or operations if misused.<\/td>\n		Recipients may not share TLP:RED information with any parties outside of the specific exchange, meeting, or
\nconversation in which it was originally disclosed. In the context of a meeting, for example, TLP:RED information
\nis limited to those present at the meeting. In most circumstances, TLP:RED should be exchanged verbally or in person.<\/td>\n<\/tr>\n
TLP:AMBER – <\/strong>Limited disclosure, restricted to participants\u2019 organizations.\"yellow<\/td>\nSources may use TLP:AMBER when information requires support to be effectively acted upon, yet carries risks to privacy,
\nreputation, or operations if shared outside of the organizations involved.<\/td>\n		Recipients may only share TLP:AMBER information with members of their own organization who need to know the information
\nto protect systems, respond to an issue, or reduce risk. Sources are at liberty to specify additional intended limits
\nof the sharing, and those limits must be followed.<\/td>\n<\/tr>\n
TLP:GREEN – <\/strong>Limited disclosure, restricted to the community.\"green<\/td>\nSources may use TLP:GREEN when information is useful for the awareness of all participating organizations as well as
\nwith peers within the broader community or sector.<\/td>\n		Recipients may share TLP:GREEN information with peers and partner organizations within their sector or community,
\nbut not via publicly accessible channels. Information in this category can be circulated widely within a particular
\ncommunity. TLP:GREEN information may not be released outside of the community.<\/td>\n<\/tr>\n
TLP:CLEAR – <\/strong>Disclosure is not limited.\"white<\/td>\nSources may use TLP:CLEAR when information carries minimal or no foreseeable risk of misuse, in accordance with
\napplicable rules and procedures for public release.<\/td>\n		Subject to standard copyright rules, records requirements, and applicable policy expectations, TLP:CLEAR information
\nmay be distributed without restriction.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

Trinity College Examples<\/h3>\n

The examples below are intended to help Trinity community members apply TLP labels in practical situations.<\/p>\n

    \n
  • TLP:RED<\/strong>: Active security incident details limited to a small response group, such as information involving a specific person,
    \nsystem, vendor, or unresolved investigative step.<\/li>\n
  • TLP:AMBER<\/strong>: Internal notices about phishing campaigns, technical findings, control gaps, or operational risk information are shared on a need-to-know basis within Trinity College.<\/li>\n
  • TLP:GREEN<\/strong>: Threat awareness information that may be shared with trusted peers in higher education, professional communities, or sector partners, but not posted publicly.<\/li>\n
  • TLP:CLEAR<\/strong>: General cybersecurity awareness tips, training reminders, or public-facing best practice guidance intended for broad distribution.<\/li>\n<\/ul>\n

    Important Notes<\/h3>\n
      \n
    • TLP applies to the specific information being shared, not automatically to all related material.<\/li>\n
    • If you need to share information beyond what the label allows, obtain permission from the original source first.<\/li>\n
    • TLP should be used alongside Trinity College policy, data classification requirements, and any applicable legal or contractual obligations.<\/li>\n
    • If no TLP marking is present, do not assume the information is public.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

      Overview The Traffic Light Protocol (TLP) was created to facilitate greater information sharing. TLP is a set of designations used to ensure that sensitive information is shared with appropriate audiences. TLP uses four colors to define sharing boundaries for the recipient(s), indicating when and how sensitive information can be shared and supporting more effective collaboration. […]<\/p>\n","protected":false},"author":336,"featured_media":0,"parent":2971,"menu_order":1,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-12669","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nTraffic Light Protocol - Library & Information Technology Services<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Traffic Light Protocol\" \/>\n<meta property=\"og:description\" content=\"Overview The Traffic Light Protocol (TLP) was created to facilitate greater information sharing. TLP is a set of designations used to ensure that sensitive information is shared with appropriate audiences. TLP uses four colors to define sharing boundaries for the recipient(s), indicating when and how sensitive information can be shared and supporting more effective collaboration. […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/\" \/>\n<meta property=\"og:site_name\" content=\"Library & Information Technology Services\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-04T16:17:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/security.berkeley.edu\/sites\/default\/files\/styles\/width_100\/public\/red_light.png?itok=LRZvL2mu&timestamp=1630038711\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/\",\"url\":\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/\",\"name\":\"Traffic Light Protocol - Library & Information Technology Services\",\"isPartOf\":{\"@id\":\"https:\/\/www.trincoll.edu\/lits\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/security.berkeley.edu\/sites\/default\/files\/styles\/width_100\/public\/red_light.png?itok=LRZvL2mu&timestamp=1630038711\",\"datePublished\":\"2026-06-04T15:55:44+00:00\",\"dateModified\":\"2026-06-04T16:17:53+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/#primaryimage\",\"url\":\"https:\/\/security.berkeley.edu\/sites\/default\/files\/styles\/width_100\/public\/red_light.png?itok=LRZvL2mu&timestamp=1630038711\",\"contentUrl\":\"https:\/\/security.berkeley.edu\/sites\/default\/files\/styles\/width_100\/public\/red_light.png?itok=LRZvL2mu&timestamp=1630038711\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.trincoll.edu\/lits\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Technology\",\"item\":\"https:\/\/www.trincoll.edu\/lits\/technology\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Information Security\",\"item\":\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Incident Response & Reporting\",\"item\":\"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Traffic Light Protocol\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.trincoll.edu\/lits\/#website\",\"url\":\"https:\/\/www.trincoll.edu\/lits\/\",\"name\":\"Library & Information Technology Services\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.trincoll.edu\/lits\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Traffic Light Protocol - Library & Information Technology Services","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/","og_locale":"en_US","og_type":"article","og_title":"Traffic Light Protocol","og_description":"Overview The Traffic Light Protocol (TLP) was created to facilitate greater information sharing. TLP is a set of designations used to ensure that sensitive information is shared with appropriate audiences. TLP uses four colors to define sharing boundaries for the recipient(s), indicating when and how sensitive information can be shared and supporting more effective collaboration. […]","og_url":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/","og_site_name":"Library & Information Technology Services","article_modified_time":"2026-06-04T16:17:53+00:00","og_image":[{"url":"https:\/\/security.berkeley.edu\/sites\/default\/files\/styles\/width_100\/public\/red_light.png?itok=LRZvL2mu&timestamp=1630038711","type":"","width":"","height":""}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/","url":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/","name":"Traffic Light Protocol - Library & Information Technology Services","isPartOf":{"@id":"https:\/\/www.trincoll.edu\/lits\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/#primaryimage"},"image":{"@id":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/#primaryimage"},"thumbnailUrl":"https:\/\/security.berkeley.edu\/sites\/default\/files\/styles\/width_100\/public\/red_light.png?itok=LRZvL2mu&timestamp=1630038711","datePublished":"2026-06-04T15:55:44+00:00","dateModified":"2026-06-04T16:17:53+00:00","breadcrumb":{"@id":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/#primaryimage","url":"https:\/\/security.berkeley.edu\/sites\/default\/files\/styles\/width_100\/public\/red_light.png?itok=LRZvL2mu&timestamp=1630038711","contentUrl":"https:\/\/security.berkeley.edu\/sites\/default\/files\/styles\/width_100\/public\/red_light.png?itok=LRZvL2mu&timestamp=1630038711"},{"@type":"BreadcrumbList","@id":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/traffic-light-protocol\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.trincoll.edu\/lits\/"},{"@type":"ListItem","position":2,"name":"Technology","item":"https:\/\/www.trincoll.edu\/lits\/technology\/"},{"@type":"ListItem","position":3,"name":"Information Security","item":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/"},{"@type":"ListItem","position":4,"name":"Incident Response & Reporting","item":"https:\/\/www.trincoll.edu\/lits\/technology\/security\/reporting-an-information-security-incident\/"},{"@type":"ListItem","position":5,"name":"Traffic Light Protocol"}]},{"@type":"WebSite","@id":"https:\/\/www.trincoll.edu\/lits\/#website","url":"https:\/\/www.trincoll.edu\/lits\/","name":"Library & Information Technology Services","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.trincoll.edu\/lits\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.trincoll.edu\/lits\/wp-json\/wp\/v2\/pages\/12669","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.trincoll.edu\/lits\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.trincoll.edu\/lits\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.trincoll.edu\/lits\/wp-json\/wp\/v2\/users\/336"}],"replies":[{"embeddable":true,"href":"https:\/\/www.trincoll.edu\/lits\/wp-json\/wp\/v2\/comments?post=12669"}],"version-history":[{"count":3,"href":"https:\/\/www.trincoll.edu\/lits\/wp-json\/wp\/v2\/pages\/12669\/revisions"}],"predecessor-version":[{"id":12683,"href":"https:\/\/www.trincoll.edu\/lits\/wp-json\/wp\/v2\/pages\/12669\/revisions\/12683"}],"up":[{"embeddable":true,"href":"https:\/\/www.trincoll.edu\/lits\/wp-json\/wp\/v2\/pages\/2971"}],"wp:attachment":[{"href":"https:\/\/www.trincoll.edu\/lits\/wp-json\/wp\/v2\/media?parent=12669"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}