tag: Information-Classification · 1 items
- Engineer — Skip
- SOC/IR — Learn: Relevant to how analysts handle and label threat intel for sharing; clarifies that TLP governs external sharing boundaries while internal classification controls access — useful framing when onboarding new analysts or setting up intel-sharing workflows.
- Leader — Learn: Useful background for leaders building or auditing information classification policies; distinguishes TLP’s sharing-permission role from the broader internal data-classification function required by frameworks like ISO 27001 or SOC 2.