Minimum 12 characters; screened against known-breached corpora (HIBP).
System use is monitored. Unauthorised access is prohibited. All activity is logged under NATO C-M(2002)49 & STANAG 4778.