a. Enforce a limit of [Assignment: organization-defined number] consecutive invalid logon attempts by a user during a [Assignment: organization-defined time period]; and
b. Automatically [Selection (one or more): lock the account or node for an [Assignment: organization-defined time period]
; lock the account or node until released by an administrator; delay next logon prompt per [Assignment: organization-defined delay algorithm]
; notify system administrator; take other [Assignment: organization-defined action]
] when the maximum number of unsuccessful attempts is exceeded.