Security policies define the login and password management rules.
There is a default policy called Default policy for kapptivate testing and monitoring that applies to all users by default. You can have a look at what it entails by selecting the icon 
and clicking "Edit".
and clicking "Edit".If you want to customize these options, just click on "Create security policy" and fill in the details for your login / password management policy before saving.