To meet compliance we must log all successful login and failed login attempts. Also must be able to lock accounts based on failed login attempts. Goes for both web and desktop software. Where do we track and configure these critical security settings?
|