Password Requirements

SUGGESTED

Our Internal Audit department is going through a User Access Review.  One of the questions they are asking is about the password requirements on the Supervisor role.  Is there any documentation on password requirements?