Unclassified technology or software is 'published', and so not subject to the EAR, when made available to the public without restriction on further dissemination: unrestricted subscriptions; public libraries or collections; unlimited distribution at conferences, meetings, seminars, trade shows or exhibitions generally accessible to the interested public; public dissemination in any form including public internet posting; or submission of a manuscript, presentation, dataset, formula, imagery, algorithms or other representation of knowledge, intended to be made public if accepted, to co-authors, editors or reviewers, to researchers conducting fundamental research, or to organisers of open conferences. Published 5D002 encryption software stays subject unless it is publicly available object code whose source code meets 742.15(b); electronic files ready to drive CNC or additive manufacturing equipment to produce firearms or frames or receivers under 0A501, 0A506, 0A507 or 0A509 remain subject even when posted online.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.