Compliance

Trust center

Trust Center | Compliance

At Johnson Controls, cybersecurity and product integrity are foundational to our mission of delivering smart, secure, and sustainable building solutions. In alignment with industry standards around the world, we are actively working across all areas of our organization to ensure full compliance with local, regional and international regulations.

Our Compliance Efforts Include:

Conducting comprehensive audit of all applicable products
Integrating secure-by-default architecture into product development
Establishing robust vulnerability reporting and patching protocols
Maintaining Software Bills of Materials (SBOMs) for transparency
Collaborating with global regulatory bodies and industry partners

By sharing this information, we aim to help you maximize product value and make more sustainable decisions.

We view compliance not only as a regulatory obligation, but as an opportunity to strengthen our commitment to cybersecurity, customer trust, and operational excellence. Our teams are working proactively to meet all compliance milestones ahead of enforcement timelines, including vulnerability‑reporting requirements mandated by regulatory bodies worldwide.

Cybersecurity certifications:

Building security into every solution

ISASecure® Security Development Lifecycle Assurance (SDLA) program certified

Johnson Controls' global development locations and associated brands are certified to ISASecure® Security Development Lifecycle Assurance (SDLA) ISA/IEC 62443-4-1, demonstrating our commitment to secure-by-design development practices and cyber-resilient solutions. This certification reinforces our dedication to delivering trusted technologies built on industry-leading cybersecurity standards.

Securing Critical Cooling Infrastructure

ISASecure® Component Security Assurance (CSA) certified

Johnson Controls has successfully earned ISASecure® Component Security Assurance (CSA) ISA/IEC 62443-4-2 Level 1 certifications for the following YORK® chiller product families:

These solutions support a wide range of commercial, industrial, healthcare, and mission-critical environments around the world. The ISASecure® CSA ISA/IEC 62443-4-2 certification demonstrates that these products have been independently assessed against internationally recognized cybersecurity requirements for secure industrial automation and control system components. This certification reinforces our dedication to delivering trusted technologies built on industry-leading cybersecurity standards and helping customers operate with confidence in an increasingly connected world.

For questions or additional information, please contact the Johnson Controls Trust Center TrustCenter@jci.com.