SC-51: Hardware-based Protection
From NIST's SP800-53:
a. Employ hardware-based, write-protect for [Assignment: organization-defined system firmware components]; and b. Implement specific procedures for [Assignment: organization-defined authorized individuals] to manually disable hardware write-protect for firmware modifications and re-enable the write-protect prior to returning to operational mode.
Cyber Threat Graph Context
Explore how this control relates to the wider threat graph