The organization defines the minimum number of characters that are changed when new passwords are created.
No STIG checks reference this CCI.