As applied to an implementation specification (see implementation specification, above), indicating an implementation specification that a covered entity must implement. All implementation specifications are either required or addressable (see “addressable” above).
Sources:
NIST SP 800-66r2
from
HIPAA Privacy Rule - §164.306(d)(2)