ICOTS Users must answer security questions anytime they reset their password. When incorrect answers are provided, their account will be locked. The lockout lasts 24 hours or until a state administrator manually resets their security questions.
Note: This security lockout is different than if they enter their password incorrectly more than 5 times. When a user forgets their password, the lockout only lasts 20 minutes and then the user can attempt to log in again.
Once a state administrator resets the security on the account, the user will be prompted to enter new answers to their security questions the next time they request a password reset email.
The reset option is located under the "Security Reset" tab of the User Profile. A state administrator is the only type of user that can make this update.