The temporary or permanent invalidation (e.g. through removal, cancellation or deactivation) of identities, principals, credentials and/or authorizations.
Question: should account lockout policies be considered as revocations? Strictly speaking, yes.