The organization enforces password complexity by the number of special characters used.
No STIG checks reference this CCI.