Traffic Light Protocol (TLP-SIG)


TLP, originally developed to encourage information sharing with and among public and private sector security professionals in the United Kingdom, has achieved widespread adoption around the globe. In regular use by all types of CSIRTs, PSIRTs, operational trust communities, information sharing analysis organizations, government agencies, and private researchers, TLP has achieved "de facto" international standard status. The FIRST community, in consultation with other security information sharing communities, established a Standards SIG for TLP to ensure that interpretations are consistent and that TLP is leveraged appropriately and with clear expectations by all.

The FIRST TLP SIG governs the definition of TLP for the benefit of the worldwide security incident response community and its partners. The TLP SIG members standardize, translate and, as necessary, evolve the TLP in an independent, fair and transparent fashion.

Goals & Deliverables

At the 28th Annual Conference and AGM in Seoul, June 2016, the TLP SIG produced the initial draft of a common, standardized set of definitions for all Traffic Light Protocol colors in English along with clear usage guidance explaining how, when and where TLP should be used to be most effective. This draft was presented to the FIRST Board during the conference to be considered for publication as FIRST standard and hosted on the public website as a reference.

Visit the Traffic Light Protocol Definitions and Usage Guidance at

In 2020, the TLP-SIG will enter the FIRST TLP into the current FIRST Standards process, as defined in the FIRST Standards Policy.


Request to Join