[PCI DSS 1.x] 8.5.14 Set the lockout duration to thirty minutes or until administrator enables the user ID

8.5.14 For a sample of system components, critical servers, and wireless access points, obtain and inspect system configuration settings to verify that password parameters are set to require that once a user account is locked out, it remains locked for thirty minutes or until a system administrator resets the account