The Security Incident Procedures standard requires just one implementation specification. That implementation specification is:
Termination Procedures
Automatic Logoff
Emergency Access Procedure
Contingency Operations
Response and Reporting
Submit