SecureBoot Readiness Assessment

1. Do your systems use UEFI (not Legacy BIOS)?

Yes
Not Sure
No

2. Is Secure Boot enabled on all production systems?

Yes
Partially
No

3. Is TPM 2.0 active and verified?

Yes
Not Sure
No

4. Is full disk encryption enabled?

Yes
Some Devices
No

5. Are firmware settings password protected?

Yes
Some Systems
No

6. Are external boot devices disabled?

Yes
Partially
No

7. Do you verify boot integrity after updates?

Yes
Sometimes
Never

8. Is there a documented boot integrity policy?

Yes
Informal
No

9. Are Secure Boot keys managed beyond OEM defaults?

Yes
Not Sure
No

10. Is boot integrity part of system onboarding?

Yes
Occasionally
No