Laserfiche WebLink
A TRUE COPY <br />CERTIFICATION ON LAST PAGE <br />RYAN L. BUTLER, CLERK <br />ADDENDUM A - Traffic Light Protocol Labeling <br />Public Safety Threat Alliance furnished Intelligence information shall not include classified <br />information. The Member and PSTA agree that all information submitted, processed, stored, <br />archived, or disposed of on or through Public Safety Threat Alliance is "sensitive" information and <br />will be labeled and handled in accordance with the U.S. Department of Homeland ("DHS") Security <br />classification guidelines (Traffic Light Protocol (TLP)). <br />As part of the PSTA, agencies and other Members are encouraged to share their own <br />cybersecurity threat experiences to improve the awareness and readiness of the overall group. <br />Submitting agencies should stipulate the level of disclosure required for their submissions <br />according to the PSTA Traffic Light Protocol (TLP), based upon the CISA Traffic Light Protocol <br />guidance, which helps all Members submit and leverage insights while being respectful of the <br />submitting agency's preferences. <br />NOT FOR DISCLOSURE: <br />Restricted to the immediate PSTA participants only <br />When should it be used? - Sources may use when information cannot be effectively <br />acted upon by additional parties, and could lead to impacts on a party's privacy, reputation, or <br />operations if misused. <br />How may it be shared? - Recipients may not share information with any parties outside <br />of the specific exchange, meeting, or conversation in which it was originally disclosed. In the <br />context of a meeting, for exam le, information is limited to those present at the meeting. <br />In most circumstances, should be exchanged verbally or in person. <br />LIMITED DISCLOSURE: <br />Restricted to participants' organizations <br />When should it be used? - Sources may use ' ' ' when information requires support to be <br />effectively acted upon, yet carries risks to privacy, reputation, or operations if shared outside of the <br />organizations involved. <br />How may it be shared? - Recipients may only share ' information with Members of <br />their own organization, and with clients or customers who need to know the information to protect <br />themselves or prevent further harm. 104 Restricts sharing to the organization <br />only. <br />LIMITED DISCLOSURE <br />Restricted to the community <br />When should it be used? - Sources may use when information is useful for the <br />awareness of all participating organizations as well as with peers within the broader community or <br />sector. <br />How may it be shared? - Recipients may share information with peers and partner <br />organizations within their sector or community, but not via publicly accessible channels. <br />Information in this category can be circulated widely within a particular community. <br />information may not be released outside of the community. <br />DISCLOSURE IS NOT LIMITED <br />When should it be used? - Sources may use when information carries minimal or no <br />foreseeable risk of misuse, in accordance with applicable rules and procedures for public release. <br />How may it be shared? - Subject to standard copyright rules, 1111111information may be <br />distributed without restriction. <br />