BaselineWatch
15 requirements
Desk

NIST platform security: roots of trust, firmware and secure enclaves SP 800-147

All1 Introduction2 Background3 Load and Execute Additional Firmware Modules: The system BIOS executes additional4 Manual Recovery: To recover from a corrupt or malfunctioning system BIOS, many computer5 Automatic Recovery: Some computer systems are able to detect when the system BIOS has beenAppendix A Summary of Guidelines for System BIOS ImplementationsAppendix B GlossaryAppendix C Acronyms and AbbreviationsAppendix D References
Controls in this version
RefTitleText
1 Introduction
1.1
in 1
Authority The National Institute of Standards and Technology (NIST) developed this document in furtherance of its statutory responsibilities under the Federal Information Security Management Act (FISMA) of 2002, Public Law 107-347. NIST is responsib
1.2
in 1
Purpose and Scope This document provides guidelines for preventing the unauthorized modification of Basic Input/Output System (BIOS) firmware on PC client systems. Unauthorized modification of BIOS firmware by malicious software constitutes a significant thr
1.3
in 1
Audience The intended audience for this document includes BIOS and platform vendors, and information system security professionals who are responsible for managing the endpoint platforms’ security, secure boot processes, and hardware security module
1.4
in 1
Document Structure The remainder of this document is organized into the following major sections:  Section 2 presents an overview of the BIOS and its role in the boot process, and identifies potential attacks against the BIOS in an operational environment.

5 of 15.