The information system enforces password complexity by the minimum number of upper case characters used.