Access is monitored and recorded. The account is temporarily locked after repeated failed sign-in attempts.