Cyware has announced the adoption of the newly launched Traffic Light Protocol (TLP) standard version 2.0 to strengthen threat intelligence sharing capabilities within and between organizations worldwide.
The TLP standard is an essential system that aids organizations all over the world in sharing sensitive information with the necessary disclosure rules, the Forum of Incident Response and Security Team (FIRST) for the cybersecurity industry has updated it. In 2015, FIRST spearheaded efforts to harmonize and standardize the TLP to encourage greater sharing of threat information across industries, and Cyware has become one of the early adopters of the new standard.
Anuj Goel, CEO of Cyware commented, “The initiative to elevate threat intelligence sharing capabilities while keeping pace with the latest industry standards puts Cyware in a leading position with regards to adoption of the TLP 2.0 standard. In addition to providing large enterprises, MSSPs/MDRs, information-sharing communities (ISACs/ISAOs), and national CERTs with state-of-the-art threat intelligence-sharing, low-code security automation, and threat response solutions, Cyware has now taken one more step to enable organizations across the spectrum to modernize their information sharing initiatives to foster cybersecurity collaboration.”
Cyware Situational Awareness Platform (CSAP) helps businesses and information-sharing communities (ISACs/ISAOs) to precisely regulate the dissemination of sensitive threat intelligence, vulnerability, and malware advisories. Industry-leading ISACs and ISAOs from the healthcare, retail, energy, space, aviation, automotive, and other sectors use the platform extensively to share threat intelligence with their members and amongst themselves using the ISAC-to-ISAC sharing capability provided by Cyware.
TLP: WHITE has changed to TLP: CLEAR under the new TLP 2.0 standard, while a new TLP: AMBER+STRICT label has been added to highlight information that is only accessible within the recipient’s organization. There are four labels and a sub-label in the TLP standard. This comprises:
- No restrictions on disclosure; TLP: CLEAR.
- Limited disclosure to the community; TLP: GREEN.
- TLP: AMBER – Need-to-know basis restricted disclosure both inside the company and with clients.
- TLP: AMBER+STRICT – Limited disclosure within the organization only to those with a need-to-know basis.
- TLP: RED – Only one recipient may receive disclosure.
Chris Taylor, Director of ME-ISAC stated, “Since the ME-ISAC transitioned to Cyware’s threat intelligence sharing solutions for all of our alert distribution and indicator sharing, we have seen a huge increase in member engagement. The increased efficiency in writing and distributing alerts has enabled our analysts to spend more time focused on analysis instead of the tedium of alert authoring, and the incredible granularity in distribution options with the new TLP 2.0 support has enabled the distribution of alerts to be more focused so that our members receive just the alerts that are the most meaningful to them.”
Read More : Integrated Risk Management Platforms – All You Need to Know
