HTTP/2 301 date: Sat, 04 Oct 2025 03:42:52 GMT content-type: text/html; charset=utf-8 location: https://www.nist.gov/itl/applied-cybersecurity/nice/resources/one-pagers cf-ray: 9891abfcde6b8791-IAD cache-control: public, max-age=2764800 content-language: en content-security-policy: default-src 'self'; script-src 'self' *.nist.gov js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googletagmanager.com platform.twitter.com https://player.vimeo.com static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' *.nist.gov fonts.googleapis.com *.typekit.net; img-src 'self' 'unsafe-inline' data: *.nist.gov *.google-analytics.com *.googletagmanager.com cdnsecakmi.kaltura.com nist-el-nfrlhrr.s3.amazonaws.com https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen@2x.png https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen.png api.mapbox.com syndication.twitter.com https://h5p.org https://i.vimeocdn.com; media-src 'self' nist-el-nfrlhrr.s3.amazonaws.com; frame-src 'self' tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com https://platform.twitter.com/ https://player.vimeo.com *.bluejeans.com https://vimeo.com/ https://time.gov/ login.nist.gov https://customer-ltx6ylk10sje63q6.cloudflarestream.com https://challenges.cloudflare.com; frame-ancestors 'self'; child-src 'self' blob: tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com *.time.gov login.nist.gov; font-src 'self' *.nist.gov fonts.googleapis.com fonts.gstatic.com *.typekit.net data:; connect-src 'self' bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com; report-uri /report-csp-violation; upgrade-insecure-requests expires: Sun, 19 Nov 1978 05:00:00 GMT last-modified: Wed, 01 Oct 2025 14:05:34 GMT strict-transport-security: max-age=31536000 vary: Cookie, Accept-Encoding via: varnish x-ah-environment: prod x-cache: HIT x-cache-hits: 1 x-content-type-options: nosniff x-drupal-cache: MISS x-frame-options: SAMEORIGIN x-generator: Drupal 10 (https://www.drupal.org) x-redirect-id: 3064011 x-request-id: v-b2da8820-9ecf-11f0-8297-cb46a410225c cf-cache-status: HIT age: 208275 set-cookie: __cf_bm=F6lLkajlrYKrJCgynAfW0bvkmrT_Zx.LWQpNQrbHOoM-1759549372-1.0.1.1-oOodgOKNBoJfYp.IPIW4q7Ph_r_Wtdr7VXTTGEi1gw5bWpthvo3cWcWtDVWpePaEkw4J7SYhk.d.a.CSDvCX_2dVZtkXJfO7iywTB3OjWoA; path=/; expires=Sat, 04-Oct-25 04:12:52 GMT; domain=.nist.gov; HttpOnly; Secure; SameSite=None set-cookie: _cfuvid=uGi7jxoeayQd4lLPznKn5FN31RrjC02FEuJbE7JTYNU-1759549372968-0.0.1.1-604800000; path=/; domain=.nist.gov; HttpOnly; Secure; SameSite=None server: cloudflare HTTP/2 200 date: Sat, 04 Oct 2025 03:42:53 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip cache-control: public, max-age=2764800 content-language: en content-security-policy: default-src 'self'; script-src 'self' *.nist.gov js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googletagmanager.com platform.twitter.com https://player.vimeo.com static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' *.nist.gov fonts.googleapis.com *.typekit.net; img-src 'self' 'unsafe-inline' data: *.nist.gov *.google-analytics.com *.googletagmanager.com cdnsecakmi.kaltura.com nist-el-nfrlhrr.s3.amazonaws.com https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen@2x.png https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen.png api.mapbox.com syndication.twitter.com https://h5p.org https://i.vimeocdn.com; media-src 'self' nist-el-nfrlhrr.s3.amazonaws.com; frame-src 'self' tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com https://platform.twitter.com/ https://player.vimeo.com *.bluejeans.com https://vimeo.com/ https://time.gov/ login.nist.gov https://customer-ltx6ylk10sje63q6.cloudflarestream.com https://challenges.cloudflare.com; frame-ancestors 'self'; child-src 'self' blob: tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com *.time.gov login.nist.gov; font-src 'self' *.nist.gov fonts.googleapis.com fonts.gstatic.com *.typekit.net data:; connect-src 'self' bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com; report-uri /report-csp-violation; upgrade-insecure-requests expires: Sun, 19 Nov 1978 05:00:00 GMT last-modified: Fri, 03 Oct 2025 14:35:54 GMT strict-transport-security: max-age=31536000 vary: Cookie,Accept-Encoding via: varnish x-ah-environment: prod x-cache: MISS x-content-type-options: nosniff x-drupal-cache: HIT x-frame-options: SAMEORIGIN x-generator: Drupal 10 (https://www.drupal.org) x-request-id: v-6847784e-a06a-11f0-9ef3-6374441e159e cf-cache-status: HIT age: 30885 server: cloudflare cf-ray: 9891abfe88298791-IAD Skip to main content