diff --git a/docs/howto/process_implementation.md b/docs/howto/process_implementation.md index 478c6ba..be4bf15 100644 --- a/docs/howto/process_implementation.md +++ b/docs/howto/process_implementation.md @@ -52,6 +52,17 @@ Our experience at the CERT/CC shows that this distinction is rarely a significan simply publish at their own pace shortly after the embargo ends. However, at times, case Participants may find it necessary to coordinate even more closely on publication scheduling. +!!! example "TLP and Embargoes" + + The [Traffic Light Protocol (TLP)](https://www.first.org/tlp){:target="_blank"} is a useful tool for managing the + dissemination of sensitive information. + TLP can be used to indicate how widely information can be shared and what restrictions apply during an embargo. + For example, an embargoed case might be marked **TLP:AMBER** + to indicate that the information is sensitive and should be shared only with those who need to know. + Thus, an embargo declaration might take the form of "This case is **TLP:AMBER** + until 2024-03-31 23:59:59 UTC, at which time it becomes **TLP:CLEAR**." + We have more to say about the use of TLP in CVD in the [CERT Guide to CVD](https://certcc.github.io/CERT-Guide-to-CVD/howto/operation/opsec/){:target="_blank"}. + ## CS Implementation Notes Because part of the CS model is Participant specific and the other is global to the case, we address each part below. diff --git a/mkdocs.yml b/mkdocs.yml index 8d2ebfd..a596767 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -207,6 +207,7 @@ nav: - Build a Behavior Tree library: 'adr/0003-build-custom-python-bt-engine.md' - Use Factory Pattern for BT nodes: 'adr/0004-use-factory-methods-for-common-bt-node-types.md' - Use ActivityStreams Vocabulary as Message Format: 'adr/0005-activitystreams-vocabulary-as-vultron-message-format.md' + - Use CalVer for Versioning: 'adr/0006-use-calver-for-project-versioning.md' - About: - Contributing: 'about/contributing.md' - FAQ: 'about/faq.md'