The organization defines the minimum number of upper case characters for password complexity enforcement.
No STIG checks reference this CCI.