HTTP/2 301 date: Fri, 03 Oct 2025 09:21:06 GMT content-type: text/html; charset=utf-8 location: https://www.nist.gov/itl/applied-cybersecurity/nice cf-ray: 988b5e0ddc764944-IAD age: 99523 cache-control: public, max-age=2764800 content-language: en content-security-policy: default-src 'self'; script-src 'self' *.nist.gov js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googletagmanager.com platform.twitter.com https://player.vimeo.com static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' *.nist.gov fonts.googleapis.com *.typekit.net; img-src 'self' 'unsafe-inline' data: *.nist.gov *.google-analytics.com *.googletagmanager.com cdnsecakmi.kaltura.com nist-el-nfrlhrr.s3.amazonaws.com https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen@2x.png https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen.png api.mapbox.com syndication.twitter.com https://h5p.org https://i.vimeocdn.com; media-src 'self' nist-el-nfrlhrr.s3.amazonaws.com; frame-src 'self' tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com https://platform.twitter.com/ https://player.vimeo.com *.bluejeans.com https://vimeo.com/ https://time.gov/ login.nist.gov https://customer-ltx6ylk10sje63q6.cloudflarestream.com https://challenges.cloudflare.com; frame-ancestors 'self'; child-src 'self' blob: tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com *.time.gov login.nist.gov; font-src 'self' *.nist.gov fonts.googleapis.com fonts.gstatic.com *.typekit.net data:; connect-src 'self' bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com; report-uri /report-csp-violation; upgrade-insecure-requests expires: Sun, 19 Nov 1978 05:00:00 GMT last-modified: Wed, 01 Oct 2025 13:03:49 GMT strict-transport-security: max-age=31536000 vary: Cookie, Accept-Encoding via: varnish x-ah-environment: prod x-cache: MISS x-content-type-options: nosniff x-drupal-cache: HIT x-frame-options: SAMEORIGIN x-generator: Drupal 10 (https://www.drupal.org) x-redirect-id: 2545691 x-request-id: v-9170685c-9f52-11f0-94ca-ff78b55fbe49 cf-cache-status: HIT set-cookie: __cf_bm=RP_k93Yay2_Os9hbpQ4ehIE8x65YEE4w.ByMne0s5Fg-1759483266-1.0.1.1-GZdJOL3tZmACgzcZEdZg49yfnV8_osV9WLf8dI5Pj332k8X5G5.CQ5iyBX6SpYWt4f9fCe5odBjMHpe38FZruoYxxOXVkivCcOY9N9M766o; path=/; expires=Fri, 03-Oct-25 09:51:06 GMT; domain=.nist.gov; HttpOnly; Secure; SameSite=None set-cookie: _cfuvid=7cw.MdVXJGpZgXsl0Hnxey3zRp6IJ5btUZqVG788XnU-1759483266228-0.0.1.1-604800000; path=/; domain=.nist.gov; HttpOnly; Secure; SameSite=None server: cloudflare HTTP/2 200 date: Fri, 03 Oct 2025 09:21:06 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip age: 52629 cache-control: public, max-age=2764800 content-language: en content-security-policy: default-src 'self'; script-src 'self' *.nist.gov js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googletagmanager.com platform.twitter.com https://player.vimeo.com static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' *.nist.gov fonts.googleapis.com *.typekit.net; img-src 'self' 'unsafe-inline' data: *.nist.gov *.google-analytics.com *.googletagmanager.com cdnsecakmi.kaltura.com nist-el-nfrlhrr.s3.amazonaws.com https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen@2x.png https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen.png api.mapbox.com syndication.twitter.com https://h5p.org https://i.vimeocdn.com; media-src 'self' nist-el-nfrlhrr.s3.amazonaws.com; frame-src 'self' tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com https://platform.twitter.com/ https://player.vimeo.com *.bluejeans.com https://vimeo.com/ https://time.gov/ login.nist.gov https://customer-ltx6ylk10sje63q6.cloudflarestream.com https://challenges.cloudflare.com; frame-ancestors 'self'; child-src 'self' blob: tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com *.time.gov login.nist.gov; font-src 'self' *.nist.gov fonts.googleapis.com fonts.gstatic.com *.typekit.net data:; connect-src 'self' bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com; report-uri /report-csp-violation; upgrade-insecure-requests expires: Sun, 19 Nov 1978 05:00:00 GMT last-modified: Thu, 02 Oct 2025 18:43:51 GMT strict-transport-security: max-age=31536000 vary: Cookie,Accept-Encoding via: varnish x-ah-environment: prod x-cache: MISS x-content-type-options: nosniff x-drupal-cache: HIT x-frame-options: SAMEORIGIN x-generator: Drupal 10 (https://www.drupal.org) x-request-id: v-c08816ea-9fbf-11f0-b44e-9b05c5ed3a2f cf-cache-status: HIT server: cloudflare cf-ray: 988b5e0f6f934944-IAD Skip to main content