AC.L2-3.1.8[b] — Access Control (Unsuccessful Logon Attempts)Domain: Access Control (AC) | Practice: AC.L2-3.1.8 | Objective ID: 3.1.8[b] | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2 | Assessment Objective: The defined means of limiting unsuccessful logon attempts is implemented. |
Content summary: Configure systems to enforce login lockout thresholds automatically. This mitigates brute-force and credential-stuffing attacks against CUI systems.