For encryption software the export is an actual shipment, transfer or transmission out of the United States or a transfer in the United States to a foreign embassy or affiliate; for 5D002 EI-controlled software it includes downloading it abroad or making it available online to persons outside the United States unless adequate precautions prevent unauthorised transfer. For internet transfers of 740.17(b)(2) products, the precautions include an access control system that checks requesting addresses outside the U.S., Australia, Canada and the U.K. for foreign government end-user domains, notice to every recipient that the software is export controlled, and an affirmative acknowledgment by every recipient that it is not for a government end user and cannot be exported without authorisation. Publicly available encryption source code meeting 742.15(b) and its object code are not subject.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.