Specific requirements or instructions for implementing a standard.
Sources:
NIST SP 800-66r2
under implementation specification
from
HIPAA Security Rule - §160.103