The organization defines in the security plan, explicitly or by reference, the time period for lock out mode or delay period.
No STIG checks reference this CCI.