Assessment Objective

Determine if:

• AC-07a. a limit of [Assignment: number] consecutive invalid logon attempts by a user during [Assignment: time period] is enforced;
• AC-07b. automatically [Selection (one or more): lock the account or node for [Assignment: time period] ; lock the account or node until released by an administrator; delay next logon prompt per [Assignment: delay algorithm] ; notify system administrator; take other [Assignment: action] ] when the maximum number of unsuccessful attempts is exceeded.

Assessment Methods

Examine

• Access control policy
• procedures addressing unsuccessful logon attempts
• system design documentation
• system configuration settings and associated documentation
• system audit records
• system security plan
• other relevant documents or records

Interview

• Organizational personnel with information security responsibilities
• system developers
• system/network administrators

Test

• Mechanisms implementing access control policy for unsuccessful logon attempts

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final