A good writeup and worth it for the links alone. Does a good job of mentioning existing tools and previous talks on the topic.

The chipsec tool looks pretty useful for evaluating your setup: https://github.com/chipsec/chipsec

Also the UEFI parser https://github.com/theopolis/uefi-firmware-parser looks to be really useful if you want to dig deeper.