Security options
"Various precautions to guard against this sort of attack are possible including enabling UEFI SecureFlash, updating the BIOS whenever there is a security patch and setting up a BIOS or UEFI password"
If someone has managed to bypass your entire office security, got into the server room and managed to reflash a machine without anyone noticing then IMHO a reflashed BIOS is probably the least of your worries.
Newsflash: Once someone has physical access to a machine its Game Over.