Unsuccessful Logon Attempts | AC-7
Description
- As technology permits, information resources should enforce account lockouts after 10 failed attempts at minimum.
- Accounts locked due to multiple incorrect logon attempts should stay locked for a minimum of 15 minutes. Information Resource Owners can choose to require that an administrator reset accounts when they are locked.
Last updated: 3/11/2024
Contact Hours
Questions?