Click open a security policy. If there isn't one added, learn how to add a security policy here.
Navigate to Advanced Settings from its top menu, where you can find the Lock Period Settings.
Set Monitoring Period, Max Number of Invalid Sign-ins, and Lock Period by selecting a desired option from each of the respective dropdowns. Get to know the definitions of these parameters here.