Business Process Server provides password security policy framework, which includes a set of interfaces. The enforcement of the password policy depends on the classes implementing the framework interfaces. The default password policy implementation is provided in Business Process Server.