Requirement 8.5.14

Set the lockout duration to a minimum of 30 minutes or until administrator enables the user ID.