Temp - AD Password Policy
Newfield / Cyber Essentials - Password Requirements:
Password must:

To avoid brute force attempts, account will be locked out for 60 minutes after 10 incorrect attempts occur within 5 minutes.
A minimum length of 12 characters.
Changed every 60 days minimum!