CCD authorises consumer computers, phones, monitors, printers, peripherals, consumer information security products and software (not encryption source code) to Belarus, Cuba, Russia and Syria, and a wider list (storage, network equipment, cameras, receivers and more) to Cuba and Syria only, where 'consumer' means sold from stock at retail and user-installable; recipients in Belarus, Cuba and Russia must be independent non-governmental organisations or individuals other than listed government and party officials; it does not authorise U.S.-owned foreign entities' reexports to Cuba that OFAC would not license.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.