Password Policy and Account Lockout Policy for KeyStorage

Hi
I have a question.

when I discuss with internal Korean Members
I found the requirement for password and account lockout policies for
keyStorage.

Password and Account Lockout policies are normally covers followings
- password complexity
- password duration
- allowed attempts
- lockout duration
- prevent to use already used passwords
- timeout
- ...

I'm not sure it is belong the scope of our working group
but when we considering the security compliances, it is required feature
(binary plugins were implementing it)

any comments?


-- 
Mountie Lee

PayGate
CTO, CISSP
Tel : +82 2 2140 2700
E-Mail : mountie@paygate.net

=======================================
PayGate Inc.
THE STANDARD FOR ONLINE PAYMENT
for Korea, Japan, China, and the World