scope:

This guidance applies to:

• Security practitioners; particularly Cyber Security
• Business areas and process owners that wish to assess or re-assess their information exchange needs
• Users of TfL information systems that wish to know which file types are blocked under TfL cyber security policies.

This document applies to all information systems that are owned, operated or supported by (or on behalf of) TfL and which have access to the World Wide Web.

Purpose

This guidance document identifies which websites can and cannot be accessed, by default, by users of TfL's information systems.