Information arising from fundamental research is outside both regimes, but the tests differ. The ITAR public-domain definition covers fundamental research in science and engineering at accredited U.S. institutions of higher learning where results are ordinarily published and shared broadly, and excludes university research whose researchers accept other publication restrictions or that is U.S.-Government funded with specific access and dissemination controls (120.34(a)(8)). The EAR excludes technology or software that arises during or results from fundamental research and is intended to be published, not tied to universities, while allowing short prepublication reviews for patent protection or sponsor proprietary information, and noting that controlled inputs released to conduct the research remain subject to the EAR (734.8). Accepting a publication restriction takes the results out of fundamental research until the restriction is lifted.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.