The organization defines the requirements required by the automated tools to determine if password authenticators are sufficiently strong.
No STIG checks reference this CCI.