diff --git a/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c b/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
index 71de272bf2..8e9135709c 100644
--- a/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
+++ b/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
@@ -1089,7 +1089,7 @@ ProcessVarWithPk (
       return Status;
     }
 
-    if (mPlatformMode != SETUP_MODE || IsPk) {
+    if ((mPlatformMode != SETUP_MODE) || IsPk) {
       Status = VendorKeyIsModified ();
     }
   } else if (mPlatformMode == USER_MODE) {