2.5 Inhibit Password Guessing

Harvard Enterprise Security Policy:

Policy Excerpt
There must be a mechanism to limit to the number of repeated unsuccessful attempts to log into an application or server that deals with confidential information.

HLS Policy:

HLS ITS has implemented a policy of 10 failed login attempts for HLS domain resources. After 10 failed login attempts you will have to wait 15 minutes before attempting to login again.