Kathy wants to ensure that she shares threat intelligence containing sensitive information with the appropriate audience. Hence, she used traffic light protocol (TLP). Which TLP color would you signify that information should be shared only within a particular community?

Traffic Light Protocol (TLP) is a set of designations used to ensure that sensitive information is shared with the appropriate audience. TLP Amber indicates that information may be shared with members of their own organization and with clients or customers who need to know the information to protect themselves or prevent further harm. This restricts sharing to a particular community - specifically within the organization and its direct stakeholders, but not publicly or to all participating organizations.

A. Red - Restricts sharing to specific named recipients only, not a community.

B. White - Allows unlimited public disclosure, opposite of community restriction.

C. Green - Permits sharing within the broader community/sector, not limited to particular community.

1. CISA, "Traffic Light Protocol (TLP) Definitions and Usage," Version 2.0, August 2022, Section 3.3 "TLP:AMBER" - specifies limited disclosure restricted to participants' organizations and those who need to know.

2. FIRST.org, "Traffic Light Protocol (TLP) Version 2.0," Standards Track, 2022, Page 4, TLP:AMBER definition - "Recipients may share TLP:AMBER information with members of their own organization and its clients."

3. US-CERT, "Traffic Light Protocol (TLP) Matrix and Frequently Asked Questions," Technical Report, Section 2.3 - defines Amber as limited distribution within specific organizational boundaries.