Unsuccessful Logon Attempts | AC-7


  • As technology permits, information resources should enforce account lockouts after 10 failed attempts at minimum.
  • Accounts locked due to multiple incorrect logon attempts should stay locked for a minimum of 15 minutes. Information Resource Owners can choose to require that an administrator reset accounts when they are locked.

Last updated: 3/11/2024

Contact Hours