The organization defines the minimum number of numeric characters for password complexity enforcement.
No STIG checks reference this CCI.