Default Password Setup Parameters

Where can I find the system values (defaults) for password lengths, expiration intervals, failed login attempts?
Our auditors are asking us to provide this information. I know we can set some of these parameters at the user profile level, but they are looking for where the defaults are set.
Thanks,

You can set these values in a version for P98OWSEC (iv). So your default would be whatever you set in the version you are executing P98OWSEC with.

There is a Form Exit off P98OWSEC where all that is set.

hello.
changing password len should be in Processing Option, see this doc 1261994.1
regards