Block excessive logins Block user from logging in for a period of time after no more than 10 successive invalid login attempts.
Permit only competent operation of servers It is important that anyone who performs administrative responsibilities on these systems have sufficient technical knowledge, via experience and/or training, to be able to implement these requirements and recognize when they need to seek help.