As applied to an implementation specification (see implementation specification, above], indicating an implementation specification that a covered entity must implement. All implementation specifications are either required or addressable (see “addressable” above).
Source(s):
NIST SP 800-66 Rev. 1
from
45 C.F.R., Sec. 164.306(d)(2)