AC-7 Unsuccessful Logon Attempts
Last Review: 10/1/2022
Statement
Access to WTAMU information resources controlled by a User ID and password shall employ mechanisms to disable or lockout User IDs which experience multiple failed logins.
Applicability
The intended audience for this control includes, but is not limited to, all information resource data/owners, management personnel, and system administrators.
Implementation
- Account lockout failed attempt features are activated on all WTAMU systems and must disable or lockout accounts after no more than 10 failed login attempts.
- Accounts locked out due to incorrect logon attempts require manual intervention to reinstate.
- Users must submit a service request to reinstate their account.