Tech Challenge

A company's password policy forces every employee to change their password every 60 days and requires at least one uppercase letter, one digit and one symbol. Which change best aligns the policy with NIST SP 800-63B guidance for memorized secrets?