Skip to main content

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore

Traffic Light Protocol (TLP) 2.0

FAQs on the TLP (Traffic Light Protocol) 2.0, a system for sharing cybersecurity information securely, allowing organisations to classify and share data based on sensitivity levels.

Last updated 20 January 2025
What should I do if the information I have received has a TLP marking that restricts me from sharing it with an organisation / individual that I believe need to know this information?

Should there be a need to share any information with organisations/individuals outside the limitation of TLP marking, please seek permission from CSA.

I am a Regulator receiving information tagged as TLP:AMBER. Who else can I share the information with?

Information tagged as TLP:AMBER may be shared with both your inhouse and outsource contractors (i.e. the individual / staff working for the organisation) who are providing cybersecurity services to your agency. Information may also be shared with your regulatees in order for them to take action to protect themselves.

I am a member of an ISAC / formal sharing group management body receiving information tagged as TLP:AMBER+STRICT. Can I share the information with other members?

ISAC / formal sharing group management body shall not share TLP:AMBER+STRICT information with other members of the ISAC / formal sharing group.