NAC authorises exports and reexports of 3A090 (except 3A090.c), 4A090 and specified .z items, other than datacenter 3A090.a items, to Macau, D:5 or entities headquartered there; ACA covers the same items to other destinations and in-country transfers within Macau and D:5. Both require a written purchase order before each shipment (commercial samples excepted). NAC requires notification to BIS in SNAP-R at least 25 calendar days before the first export to the end user, with total processing performance, performance density, datasheet showing datacenter design or marketing, all NAC and licence approvals to the end user in the past 12 months, memory bandwidth and cluster details; BIS may require a licence, and STELA gives the NAC confirmation number for AES. The .z encryption items must also meet ENC; neither exception overcomes Part 744 or 746 licence requirements (with a narrow 744.23(a)(3) carve-out).
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.