# External source check (HRIS-STRIP-20260831)

Checked 2026-09-04 with `scripts/verify-external-sources.py` (GET, follow redirects, 25s timeout). None of these pages audited this fixture. Machine log: [`external-source-check-HRIS-STRIP-20260831.json`](./external-source-check-HRIS-STRIP-20260831.json).

| Source | Requested URL | Final URL | HTTP | Title SHA-256 | Note | Use |
|---|---|---|---|---|---|---|
| Privacy Framework | https://www.nist.gov/privacy-framework | https://www.nist.gov/privacy-framework | 200 | 19305ab321cb736d |  | Privacy-risk management |
| Employment practices and data protection | https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/ | https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/ | 200 | bd77a1019f2ac5eb |  | Worker-data protection context |
| Zero trust architecture | https://www.ncsc.gov.uk/collection/zero-trust-architecture | https://www.ncsc.gov.uk/collection/zero-trust/architecture-design-principles | 200 | 71bd80ee7e5597a9 |  | Access-control context |
| SP 800-171 Rev. 2 | https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final | https://csrc.nist.gov/pubs/sp/800/171/r2/upd1/final | 200 | 7ddd595fc8eff529 |  | Controlled-information security context |
| Security headers | https://web.dev/articles/security-headers | https://web.dev/articles/security-headers | 200 | 0fd5df7848a75a7b |  | Web transport hardening |

Keep original requested URLs. Re-check at decision time.