Guidelines for Protecting Basic Input/Output System (BIOS) Firmware

Published

June 28, 2011

Author(s)

Shirley M. Radack

Abstract

This bulletin summarizes the information presented in NIST Special Publication (SP) 800-147, BIOS Protection Guidelines: Recommendations of the National Institute of Standards and Technology. The publication was written by David Cooper, William Polk, Andrew Regenscheid, and Murugiah Souppaya of NIST. The guidelines assist organizations in protecting the security of their systems and in preventing the unauthorized modification of BIOS firmware on PC client systems. Modern personal computers (PCs) rely on the Basic Input/Output System (BIOS) to perform fundamental systems functions when the computer is turned on. The bulletin discusses the contents of the publication, including the security concerns and threats to BIOS firmware, security practices for a secure BIOS update process, and the management best practices, which complement the security guidelines. References are provided to NIST publications that support system BIOS developers, vendors and user organizations.

Citation

ITL Bulletin -

NIST Pub Series

ITL Bulletin

Pub Type

NIST Pubs

Keywords

authentication, BIOS, Basic Input/Output System, boot firmware, cyber security, Federal Information Processing Standards, Federal Information Security Management Act, FISMA, information security, information systems, information technology (IT), integrity protection, NIST Special Publications, product vendors, security controls, security plans, security policies, system BIOS, threats, vulnerabilities

Citation

Radack, S. (2011), Guidelines for Protecting Basic Input/Output System (BIOS) Firmware, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD (Accessed October 15, 2025)