[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-155":3},{"item":4,"lessons":16,"controls":46,"related":75},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-155","SP 800-155","SP 800-155: BIOS Integrity Measurement Guidelines (Draft)",7,"US National Institute of Standards and Technology (NIST)","**What it covers.** A NIST draft publication describing how to measure the integrity of BIOS and system firmware and report those measurements so that unauthorised changes can be detected. It was published as a draft and was not finalised, though its concepts are reflected in later firmware resiliency guidance such as SP 800-193.\n\n**In practice.** Organisations use hardware roots of trust, measured boot and attestation to check that firmware matches known good values, and include firmware in monitoring. Procurement favours platforms that support these features. Evidence includes configuration of measured boot, attestation reports and firmware baselines.\n\n**Common gaps.** Common gaps are no visibility of firmware state and capabilities available in hardware but never enabled. Its draft status also means it is best read as background rather than a requirement.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42],{"slug":19,"title":20,"published_at":21},"securing-edge-ai-in-customer-owned-environments-requires-zero-trust-verification","Securing Edge AI in Customer-Owned Environments Requires Zero-Trust Verification","2026-09-04T22:20:44.679+00:00",{"slug":23,"title":24,"published_at":25},"forgotten-uefi-bootloaders-leave-secure-boot-exposed-for-years","Forgotten UEFI Bootloaders Leave Secure Boot Exposed for Years","2026-07-15T22:20:38.574+00:00",{"slug":27,"title":28,"published_at":29},"critical-u-boot-bootloader-flaws-threaten-device-chain-of-trust","Critical U-Boot Bootloader Flaws Threaten Device Chain of Trust","2026-07-10T18:21:31.305+00:00",{"slug":31,"title":32,"published_at":33},"bootrom-exploit-bypasses-apple-secure-boot-on-millions-of-iphones","BootROM Exploit Bypasses Apple Secure Boot on Millions of iPhones","2026-06-22T12:21:27.603+00:00",{"slug":35,"title":36,"published_at":37},"expiring-secure-boot-certificates-risk-uefi-bootkit-infections","Expiring Secure Boot Certificates Risk UEFI Bootkit Infections","2026-06-21T10:20:28.374+00:00",{"slug":39,"title":40,"published_at":41},"bootkits-bypass-security-through-secure-boot-spoofing","Bootkits Bypass Security Through Secure Boot Spoofing","2026-06-09T23:20:15.281+00:00",{"slug":43,"title":44,"published_at":45},"firmware-level-bootkits-achieve-unprecedented-persistence","Firmware-Level Bootkits Achieve Unprecedented Persistence","2026-04-09T18:10:04.993+00:00",[47,52,56,61,66,71],{"slug":48,"name":49,"problem":50,"stories":51},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",4,{"slug":53,"name":54,"problem":55,"stories":51},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":57,"name":58,"problem":59,"stories":60},"patch-management","Automated patch management","Known holes get closed in days, not months.",3,{"slug":62,"name":63,"problem":64,"stories":65},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",2,{"slug":67,"name":68,"problem":69,"stories":70},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",1,{"slug":72,"name":73,"problem":74,"stories":70},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[76,81,86,90,95,99,103,107],{"family":77,"item":78,"code":79,"title":80,"together":51},"nist-800-53","si-7","SI-7","Software, Firmware, and Information Integrity",{"family":82,"item":83,"code":84,"title":85,"together":51},"cis","7","Control 7","Continuous Vulnerability Management",{"family":87,"item":88,"code":89,"title":89,"together":51},"itil","overview","ITIL",{"family":91,"item":92,"code":93,"title":94,"together":60},"nist-csf","id-am","ID.AM-2","Asset Management",{"family":82,"item":96,"code":97,"title":98,"together":60},"3","Control 3","Data Protection",{"family":82,"item":100,"code":101,"title":102,"together":60},"2","Control 2","Inventory and Control of Software Assets",{"family":82,"item":104,"code":105,"title":106,"together":60},"1","Control 1","Inventory and Control of Enterprise Assets",{"family":5,"item":108,"code":109,"title":110,"together":60},"800-147","SP 800-147","SP 800-147: BIOS Protection Guidelines"]