Unless a licence condition says otherwise, a licence authorises only the items, end uses and parties described in the application and any letters of explanation, and DDTC grants it in reliance on the applicant's representations in those documents (123.28). Any deviation from what was represented, such as a different end use or an additional party, is outside the licence.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.