I assume you mean like minimum length, special characters must be used, must change password each month sort of thing? Nothing in the core for this is the short answer but you could quite easily write your own authenticator subclass (http://api.silverstripe.org/2.4/sapphire/security/Authenticator.html) to check for what rules you want.

Thank you for the reply.

This requirement has been pushed out but I'll post my findings as soon as I get back to it.

Thanks once again,