FIRST has issued two important standards for helping CSIRTs and their constituents share and re-share sensitive information more efficiently: the Traffic Light Protocol (TLP) and the Information Exchange Policy (IEP) framework. This presentation will give a quick overview of both, followed by an in-depth exploration of the use cases and more advanced options that IEP offers, in addition to the traditional TLP designations.IEP’s four policy types – Handling, Action, Sharing and Licensing – address many of the needs of larger, mature sharing communities, but can also work for sharing networks that are just starting out, so that they will be able to easily accommodate other sharing models as they grow. TLP can be used to support the “sharing” policy type in IEP’s model, so they are fully compatible.Raising awareness of FIRST’s own standards work is a valuable way to contribute to the CSIRT community around the world, and attendees of this presentation will come away with everything they need to know to implement IEP (and TLP) in their own environments, as well as to educate fellow information sharing peers and partners.