Some IT shops aren't very on top of BIOS configs. They should be, but just because they should be doesn't mean it matches reality. It doesn't occur to everyon

Some IT shops aren't very on top of BIOS configs. They should be, but just because they should be doesn't mean it matches reality. It doesn't occur to everyone to go into BIOS for any reason other than boot problems, let alone to audit for reducing attack surface area. I can see that falling through the cracks in policy and practice.