HVAC Equipment

Security

Digital Solutions

Industrial Refrigeration

Fire Suppression

Retail Solutions

Residential and Smart Home

Building Automation & Controls

Fire Detection

Distributed Energy Storage

Global Directory

South Africa - English

HVAC Equipment

Security

Digital Solutions

Industrial Refrigeration

Fire Suppression

Retail Solutions

Residential and Smart Home

Building Automation & Controls

Fire Detection

Distributed Energy Storage

Global Directory

South Africa - English

Cyber Solutions

Page Sections

Report a Vulnerability

Cybersecurity for Smart Buildings

You want to protect your smart building — and Johnson Controls is here to help you.

Facility managers today require their smart building solutions to be cyber-resilient. We have developed a full lifecycle approach and set of security practices that can help you protect your building from a range of potential cyber threats.

How do we do it? Our expert cybersecurity team designs, deploys, and services your building’s connected systems — aligned to your security program, creating a layered defense for information, products, and privacy that’s ready for rapid response as issues arise.

Johnson Controls is setting the industry standard with digital products and services designed for smart buildings. As a leader in this space we continually earn your trust by helping you achieve business outcomes while managing risk.

Johnson Controls takes a holistic, structured approach to help you protect systems and sensitive data from the risk of a cyber-attack. Powering impactful sustainability, safety and security, we deliver an enhanced customer experience.

How We Protect You

Products and Solutions>

As part of OpenBlue Secure, we tailor Cyber Solutions to your precise needs — helping you protect your smart building’s systems and data from the threat of cyberattack.

Practices>

Our holistic, structured approach uses cyber-resilient products and services to maintain a robust security posture, information security, product security, and privacy for your smart building.

Response>

A strong offense is just as important as a strong defense. As we proactively monitor the dynamic threat landscape and address risks, we’re ready for rapid response to security incidents.

Resources>

We continuously enhance our products and security guidelines — and partner with you in managing cybersecurity risk by sharing valuable information and best practices.

Product Security Advisories>

We track, identify, and address cybersecurity threats on a daily basis. As part of our commitment to transparency we keep you informed of security concerns and important Johnson Controls product updates.

OpenBlue>

OpenBlue is a complete suite of connected solutions that serves industries from workplaces to schools, hospitals to campuses and more. Our cyber solutions are designed to keep your spaces safe and secure.

Johnson Controls Approach to Secure Product Development, Support and Service

Johnson Controls designs cybersecurity into our product and solution offerings and endeavors to protect those solutions (including software, hardware and hosted services) to protect your data and operations across the risk management lifecycle. Our secure product practices include the design, sourcing, development, deployment, servicing, support and retirement of products. All new Johnson Controls commercial products are developed under governance of our cybersecurity policies, standards and guidelines, which includes requirements for product testing and vulnerability management.

Johnson Controls proactively manages cybersecurity and privacy risks. We have dedicated organizations governing product security, information security, and data privacy. These organizations work together to deliver high-quality and consistent cybersecurity and data privacy support in a way that meets the unique mission and technology needs of each customer. Powering our customers’ mission is our top priority, and that means doing our part to protect our customers’ sensitive data and operations. Our rigorous secure product development lifecycle, agile DevSecOps practices, and approach to field operations cybersecurity strengthen our ability to meet that commitment. Additionally, our unified security and privacy controls framework is structured to ensure compliance with laws and regulatory requirements, globally.

Alliances and Partnerships

It’s more than deep experience protecting smart buildings like yours — it’s continuous innovation as we protect their systems and data from new and evolving threats. That’s why we work in close collaboration with international government agencies, industry peers, and cybersecurity experts to keep our products and services at the leading edge of cyber resilience. We encourage you to learn more about our alliances and partnerships:

Johnson Controls is a founding member of the International Society of Automation’s Global Security Alliance (GCA).

Johnson Controls is a strategic voting member of ISA Secure Compliance Institute. Johnson Controls conforms to the ISA/IEC 62443 Standard.

Johnson Controls is a full member of the Forum of Incident Response and Security Teams (FIRST).

Want to sign up to receive product security advisory notifications by email?

See what's new in
Cybersecurity

See all Insights

Video management systems are an integral part of the surveillance ecosystem, as they collect video and data from a variety of sources into one ecosystem or platform for viewing, analyzing, storing and managing.

Feature Story Security Education

Proactive VMS Management in a Cyber Secure World

The introduction of Artificial Intelligence (AI) into the surveillance industry has spurred an additional transformation, enabling cameras and video management systems to become faster and smarter.

Feature Story Security Commercial

How AI is Reshaping Surveillance

How can we help you?

For everything from asking a question to raising an alarm, please use this form for a quick response from our Johnson Controls cybersecurity organization.

Report a potential vulnerability or cybersecurity concern | Ask about products and services | Learn about protecting your smart building

If you are aware of a potential security vulnerability in a Johnson Controls product, service or solution, or have a product security question, please contact us at productsecurity@jci.com.

Please use our downloadable PGP key to secure communications.

Download PGP Key

When submitting a concern, please include the following information:

Complete product name and version
Description of the concern or the potential vulnerability and the steps necessary for our staff to reproduce
A brief description of the potential impact
A reliable method to contact you
Supporting documentation, if available

Thanks to all who partner with us to create a smarter, safer, more sustainable world.

Product Security Advisories

Johnson Controls tracks, identifies and proactively addresses ever-evolving cybersecurity threats every day – it’s a top priority. This commitment is reflected in our technology innovations and continual product development to keep building management systems, IT infrastructures, and connected equipment secure.

Our dedicated cybersecurity team works with local professionals to address your concerns and immediate threats to system security. We encourage a partnership that follows best practices for IT security.

Visit Our Advisories Page

First Name* Last Name* Email* Job Role Company Name Phone Number* Country* How can we help you?* Comments*

Please read our Privacy Notice for information on how we protect and manage your personal data. By completing this form and submitting your information, you confirm that you have reviewed, understood and accepted our privacy terms as well as our cookie terms.

Disclaimer: The cybersecurity information presented on this website is intended to be informational only and is provided on an "as is" basis. Johnson Controls makes no representation or warranty (express or implied) that compliance with any of these practices, or the taking of any the actions, identified herein will ensure the security of any product or system, or prevent any unauthorized access or damage caused by a cyber incident. Johnson Controls disclaims all liability for any damages that may occur despite compliance with any of these practices, or the taking of any the actions, identified herein.

Find a location

Products and Solutions

Services and Support

Industries

Industries

Industries

About Us

Insights

Insights

Insights

Events

Global Directory

Introducing Johnson Controls Enterprise Management 2.0

Unlock the performance of your building and provide real-time data visibility across assets, people, and processes with OpenBlue Enterprise Manager.

Data Center Solutions

Introducing Johnson Controls Enterprise Management 2.0

Unlock the performance of your building and provide real-time data visibility across assets, people, and processes with OpenBlue Enterprise Manager.

Data Center Solutions

Global Directory

Cyber Solutions

Page Sections

Cybersecurity for Smart Buildings

How We Protect You

Johnson Controls Approach to Secure Product Development, Support and Service

Alliances and Partnerships

Want to sign up to receive product security advisory notifications by email?

See what's new in Cybersecurity

How can we help you?

Product Security Advisories

See what's new in
Cybersecurity