Security-relevant events in Windows Server 2012 SHOULD be collected and analysed in a central location. Encrypted partitions SHOULD be blocked after a defined number of decryption attempts.
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)