(TLP:CLEAR) WaterISAC’s Traffic Light Protocol (TLP) Infromation Sharing Guidelines

Starting the week of January 27, 2025, WaterISAC is adopting the Traffic Light Protocol (TLP) information sharing guidelines for all its written products and webinars. The use of TLP aligns WaterISAC with the widely adopted international guidelines for sharing information and facilitating more frequent and effective collaboration. Several federal agencies, such as CISA and Office of the National Cyber Director (ONCD) use the TLP.

The Traffic Light Protocol (TLP) is a widely recognized protocol designed to enhance the sharing of potentially sensitive information by indicating expected sharing boundaries to be applied by the recipient(s). TLP uses simple color-coded labels—TLP:RED, TLP:AMBER, TLP:GREEN, and TLP:CLEAR—to indicate how information can be shared, with whom, and how it can be further shared, if necessary. This approach helps to ensure that information shared by WaterISAC is disclosed appropriately, protecting both the confidentiality of sensitive details and the broader security interests of the water sector.

Here’s how this change will impact your WaterISAC experience:

1. Improved Clarity: Each email you receive, report you read, or content we post on our website will include a concise TLP designation, helping you quickly understand how the information should be handled and shared.
   • TLP:RED: Information is highly sensitive and must only be shared with the intended recipients.
   • TLP:AMBER: Information is restricted to your organization or others within your direct circle who need to know.
   • TLP:GREEN: Information may be shared with your broader network but not made publicly available.
   • TLP:CLEAR: Information is approved for public dissemination.
2. Enhanced Security: By following TLP guidelines, we can reduce the risk of unintentional information exposure and ensure that potentially sensitive information is shared only with the appropriate audiences.
3. Consistency Across Communications: Adopting the TLP standard ensures that WaterISAC communications are consistent with those issued by trusted external partners, making it easier to collaborate and respond to potentially sensitive information.

Read more about TLP guidelines at CISA.