Controlled items and data stay controlled after export. Under the ITAR a reexport is a shipment between foreign countries or a release of technical data to a foreign person who is a citizen or permanent resident of a country other than where the release happens (a deemed reexport, attributed to every country of citizenship or permanent residency); a retransfer is a change of end use or end user in the same country or a release to a national of that country (120.51, 120.52). Written DDTC approval is needed for any resale, retransfer, reexport or change in end use, end user or destination beyond the licence, and requests must carry the original authorisation, a description, quantity and value and the new end user and use (123.9(a), (c)). Under the EAR a deemed reexport is attributed to the person's most recent country of citizenship or permanent residency (734.14(b)) and an in-country transfer is a change in end use or end user (734.16).
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.