<html xmlns="http://www.w3.org/1999/xhtml"><head><meta charset="UTF-8" /><title></title><meta name="Generator" content="PowerTools for Open XML" /><style>span { white-space: pre-wrap; } p.s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cP0 { margin-top: 0; margin-bottom: 0; margin-left: 0; margin-right: 0; text-indent: 0.00in; text-align: justify; background: white; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; } span.s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0 { color: black; background: white; font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } span.s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000000 { color: #0000FF; background: white; font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } span.s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000001 { color: black; background: white; font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } span.s32854bf5-7e3a-4bf3-b8c7-187bdf40d84c000002 { color: black; background: white; font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } span.s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000003 { color: #0000FF; background: white; font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } </style></head><body><div><p dir="ltr" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cP0"><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">    </span><a href="https://sdlegislature.gov/Rules?Rule=20:18:36:13"><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000000">20:18:36:13</span></a><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000001">.  </span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000001">Authentication credentials -- Reset or locked accounts</span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000001">.</span><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0"> </span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">If the system does not recognize the authentication credentials when entered, an explanatory message must be displayed to the account holder that prompts the account holder to try again. The error message must be the same regardless of which authentication credential is incorrect</span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">.</span></p><p dir="ltr" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cP0"><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84c000002"> </span></p><p dir="ltr" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cP0"><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">    </span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">The system must support a mechanism that locks an account in the event that suspicious activity is detected, such as three  consecutive, failed access attempts in a 30-minute period. A multi-factor authentication process must be employed for the account to be unlocked</span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">.</span></p><p dir="ltr" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cP0"><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84c000002"> </span></p><p dir="ltr" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cP0"><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">    </span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000001">Source:</span><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0"> </span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">48 SDR 14, effective August 22, 2021</span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">.</span></p><p dir="ltr" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cP0"><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">    </span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000001">General Authority:</span><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0"> SDCL </span><a href="https://sdlegislature.gov/Statutes?Statute=42-7B-7"><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000003">42-7B-7</span></a><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">, </span><a href="https://sdlegislature.gov/Statutes?Statute=42-7B-11"><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000003">42-7B-11</span></a><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">(13).</span></p><p dir="ltr" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cP0"><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">    </span><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000001">Law Implemented:</span><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0"> SDCL </span><a href="https://sdlegislature.gov/Statutes?Statute=42-7B-77"><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0-000003">42-7B-77</span></a><span class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cC0">.</span></p><p dir="ltr" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84cP0"><span xml:space="preserve" class="s32854bf5-7e3a-4bf3-b8c7-187bdf40d84c000002"> </span></p></div></body></html>