What should I do if the information I have received has a TLP marking that restricts me from sharing it with a client that needs to know this information?
You can take one of three actions to resolve this issue:
If I have received TLP:amber information and shared it with my clients, why can't I simply allow those clients to further share this information with their clients at TLP:amber ?
Allowing recipients of TLP:amber information to share it at the TLP:amber level with their clients would not restrict those providers from further sharing the information to other clients, who may in turn share the information on to their respective clients, effectively making TLP:amber the same as TLP:green .
What should I keep in mind when sharing information at the TLP:green level?
To avoid a recipient sharing TLP:green further than you intended, ensure recipients understand they are receiving the information because they are members of a defined community.
What should I do if none of the TLP levels fit how I want to share my information?
You may add a caveat to the TLP level you choose for your information that provides explicit details on the extent to which the information may be shared. You may also choose to establish an agreement with the recipient organization that includes these details for all information being shared from your organization.
You can take one of three actions to resolve this issue:
- Contact the originator and request permission to share it with your client.
- Establish an agreement with the originator.
- Request that the originator add explicit permissions so that you may share the information with your need-to-know client.
If I have received TLP:amber information and shared it with my clients, why can't I simply allow those clients to further share this information with their clients at TLP:amber ?
Allowing recipients of TLP:amber information to share it at the TLP:amber level with their clients would not restrict those providers from further sharing the information to other clients, who may in turn share the information on to their respective clients, effectively making TLP:amber the same as TLP:green .
What should I keep in mind when sharing information at the TLP:green level?
To avoid a recipient sharing TLP:green further than you intended, ensure recipients understand they are receiving the information because they are members of a defined community.
What should I do if none of the TLP levels fit how I want to share my information?
You may add a caveat to the TLP level you choose for your information that provides explicit details on the extent to which the information may be shared. You may also choose to establish an agreement with the recipient organization that includes these details for all information being shared from your organization.
