Tech Target – Account lockout policy: Addressing too many failed login attempts

Microsoft – Set the account lockout threshold to recommended value

Netwrix – Account Lockout Best Practices

STIG Viewer – Network Device Management Security Requirements Guide

Texas A&M Policy: Authenticator Feedback (IA-6)

Infosecurity Magazine – Inactive Accounts: The Key to Your Company’s Sensitive Data

Microsoft – Regularly check for and remove inactive user accounts in the Active Directory

Red Hat – How to configure Account Policy Plugin in Red Hat Directory Server?

CyberSheath- How Multi-Factor Authentication Protects Your Business

Duo Multi-Factor Authentication