Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 49

Passwords should never be reused after the time limit on their use
has expired.
Answer "password generators" supply passwords
upon request. These passwords are usually comprised of numbers,
characters, and sometimes symbols. Passwords provided by
password generators are, usually, not easy to remember.
For answer "password file protection" may consist of encrypting the password
with a one-way hash function and storing it in a password file. A
typical brute force attack against this type of protection is to encrypt trial password guesses using the same hash function and to compare the encrypted results with the encrypted passwords stored in the password file.
Answer "Limiting the number or frequency of log-on attempts" provides protection in that, after a specified number of unsuccessful log-on attempts, a user may be locked out of trying to log on for a period of time. An alternative is to progressively increase the time between permitted log-on tries after each unsuccessful log-on attempt.

The Common Criteria (CC) is used in two ways:
As a standardized way to describe security requirements for IT
products and systems
As a sound technical basis for evaluating the security features of
these products and systems
The CC defines three useful constructs for building IT security
requirements: the Protection Profile (PP), the Security Target (ST),
and the PackagE. The PP is an implementation-independent statement
of security needs for a set of IT security products. The PP contains
a set of security requirements and is intended to be a reusable
definition of product security requirements that are known to be useful and effectivE. APP gives consumers a means of referring to a specific set of security needs and communicating them to manufacturers and helps future product evaluation against those needs.
Answer a defines the Security Target (ST). The ST is a statement
of security claims for a particular IT security product or system. The
ST parallels the structure of the PP, though it has additional
elements that include product-specific detailed information. An ST
is the basis for agreement among all parties as to what security the
product or system offers, and therefore the basis for its security
evaluation.
*Answer "An intermediate combination of security requirement components" describes the
PackagE. The Package is an intermediate
combination of security requirements components. The package permits
the expression of a set of either functional or assurance requirements
that meet some particular need, expressed as a set of security objectives.
*Answer "The IT product or system to be evaluated" describes the Target of Evaluation
(TOE). The TOE is an IT product or system to be evaluated, the security characteristics of which are described in specific terms by a corresponding ST, or in more general terms by a PP. This evaluation consists of rigorous analysis and testing performed by an accredited, independent
laboratory. The scope of a TOE evaluation is set by the Evaluation
Assurance Level (EAL) and other requirements specified in the ST.
Part of this process is an evaluation of the ST itself, to ensure that it is correct, complete, and internally consistent and can be used as the baseline for the TOE evaluation.
Source: Common Criteria Project.

Section: Identity and Access Management (IAM)