The TU security policy enforces a 10-minute lockout period after six bad password attempts to protect accounts.