The organization employs automated tools to determine if password authenticators are sufficiently strong to satisfy organization-defined requirements.