Corporate IT should hopefully have mechanisms for it in place, because those tend to fix a lot of problems… and security relevant bugs. Edit: And additionally,

Corporate IT should hopefully have mechanisms for it in place, because those tend to fix a lot of problems… and security relevant bugs. Edit: And additionally, yes, Windows 10 can ship BIOS updates, assuming the hardware and UEFI supports it.