[Addison West]

Hi Misty,
I really like how you explained the OWASP principle about Identification and Authentication Failures. You did a great job showing why strong authentication and good session management are so important for keeping systems safe. I agree that weak passwords and poor login controls can make it easy for attackers to break in, which is why using multi factor authentication is such a smart idea. It is great that you also mentioned account lockouts after several failed attempts because that is a simple but powerful way to stop password guessing.