What requirement in the Access Control section of the NIST SP 800-171 2nd revision requires limiting unsuccessful logon attempts?
The requirement is 3.1.8 from the Access Control section of the SP 800-171
That requirement is 3.1.8.