TSU authorises: operation technology and software (the minimum necessary for installation, operation, maintenance or repair of lawfully exported items, not development or production technology; object code only for software), including training limited to that scope; sales technology customarily sent with quotations that does not disclose detailed design, production or reconstruction technology; bug-fix software updates to the same consignee that do not enhance functions; mass market software under the General Software Note to all destinations except E:1 (not 5D002 encryption software, mass market encryption software above 64-bit keys, or MT software); release in the United States by universities of technology and source code to bona fide full-time regular foreign employees who reside permanently in the United States, are not D:5 nationals, are told in writing not to transfer it, and are not subject to Part 744 (no EI technology or MT items); and copies or editorial revisions of technology previously authorised to the same recipient. Operation software and technology for 2D983, 2D984, 2E983 and 2E984 items require records of the item, equipment, end use, end user, quantity and location.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.