Assessment Objective
Determine if:
- AC-07a. a limit of [Assignment: number] consecutive invalid logon attempts by a user during [Assignment: time period] is enforced;
- AC-07b. automatically [Selection (one or more): lock the account or node for [Assignment: time period] ; lock the account or node until released by an administrator; delay next logon prompt per [Assignment: delay algorithm] ; notify system administrator; take other [Assignment: action] ] when the maximum number of unsuccessful attempts is exceeded.
Assessment Methods
Examine
- Access control policy
- procedures addressing unsuccessful logon attempts
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with information security responsibilities
- system developers
- system/network administrators
Test
- Mechanisms implementing access control policy for unsuccessful logon attempts
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | AC-07 [M] Unsuccessful Logon Attempts |