RFC 9424, "Indicators of Compromise (IoCs) and Their Role in Attack Defence", August 2023

Errata ID: 7964
Status: Verified
Type: Technical
Publication Format(s) : TEXT, PDF, HTML
Reported By: Andrew Shaw
Date Reported: 2024-05-30
Verifier Name: Warren Kumari (Ops AD)
Date Verified: 2024-06-05

Section 3.2.3 says:

At its simplest, this indicates that
   the receiver may share with anyone (TLP:CLEAR), share within the
   defined sharing community (TLP:GREEN), share within their
   organisation and their clients (TLP:AMBER+STRICT), share just within
   their organisation (TLP:AMBER), or not share with anyone outside the
   original specific IoC exchange (TLP:RED).

It should say:

At its simplest, this indicates that
   the receiver may share with anyone (TLP:CLEAR), share within the
   defined sharing community (TLP:GREEN), share within their
   organisation and their clients (TLP:AMBER), share just within
   their organisation (TLP:AMBER+STRICT), or not share with anyone 
   outside the original specific IoC exchange (TLP:RED).

Notes:

The definitions of TLP:AMBER and TLP:AMBER+STRICT are the wrong way round in the original text.

Report New Errata