diff --git a/defaults/main.yml b/defaults/main.yml
index b5315a9..248b492 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -582,6 +582,9 @@ rhel9cis_pam_password:
     minclass: 4
 
 rhel9cis_pam_faillock:
+    attempts: 5
+    unlock_time: 900
+    fail_for_root: no
     remember: 5
 
 # UID settings for interactive users