Slide 1: Cyber Solutions Customer presentation 2019
If you can read this Click If you can read this Click on the icon to choose a on the icon to choose a picture or picture or Reset the slide. Reset the slide. To Reset: Right click on the slide To Reset: Right click on the slide thumbnail and select ‘reset slide’ or thumbnail and select ‘reset slide’
Slide 2: Cyber solutions from a trusted partner
Cyber solutions from a trusted partner 2 Johnson Controls — Copyright 2019
Slide 3: Cyber Solutions
Cyber Solutions 3 Johnson Controls — Copyright 2019
Slide 4: Solutions to address concerns where disruption is not an option
Cyber Solutions Cyber Solutions to address concerns where disruption is not an option… the safety of …. the continuity of the retention of Children… business …. customers …. Travelers… Workplace efficiency… Maintaining brand reputation … Employees… Critical operations… Assuring quality
Slide 5: Holistic Methodology: Global Product Security Team
Cyber Solutions Holistic Methodology Governed by Policies and Supported by a Dedicated Global Product Security Team… Secure development Deployment services Rapid Response Expert Driven Designs • Designed to standards • Assisted compliance • PRISRT managed by experts formal response Lifecycle Managem
Slide 6: Cyber Solutions for OT environments
Cyber Solutions – for OT environments Traditional IT concerns meet unique OT requirements… C Operation Technologies (OT) are the systems and components Physical Security System Threats I A which keep a building operational. OT systems include: (C) Confidentiality – Sensitive Violation of privacy, id
Slide 7: Disruption is Not an Option: Attacks continue to disrupt
Cyber Solution Disruption is Not an Option Attacks continue to disrupt people and businesses… External Threats Internal Threats Unintentional Threats Cyber Risk Internet Hackers Disgruntled employees Poorly managed systems April 2018 - City of Atlanta was a victim of a ransomware cyberattack. Custom
Slide 8: Our holistic cyber mindset
Cyber Solutions A Higher Level of Commitment Our holistic cyber mindset… begins at initial design Johnson Controls’ approach to cyber protection is aimed at concept providing peace of mind to our customers. We provide and support cyber continues through development resilient systems with a range of
Slide 9: Expert Driven Designs
Cyber Solutions Expert Driven Designs Our cybersecurity experts have We have invested in establishing a certifications including, but limited to …. centralized dedicated Global Product Security team that is focused on managing our cyber practices with governance to enforce compliance. Having enginee
Slide 10: Lifecycle Management
Cyber Solutions Lifecycle Management Our cyber protection approach begins with the design, development and testing. Based on Microsoft Software Development Lifecycle (SDL) v Design Develop Require Test v Respond 10 Johnson Controls — Copyright 2019
Slide 11: Lifecycle Management: Security Requirements
Cyber Solutions Lifecycle Management Security Requirements Our cyber protection approach • Baseline requirements address 14 core threat begins with the design, categories including: development and testing. • Authentication, access control, session management, data protection and malicious input han
Slide 12: Lifecycle Management: Security Design & Development
Cyber Solutions Lifecycle Management Security Design & Development Our cyber protection approach • Security champions and architects assigned to each begins with the design, project development and testing. • Designs are assessed using threat modeling • Suppliers undergo validation • Code reviews ar
Slide 13: Lifecycle Management: Testing
Cyber Solutions Lifecycle Management Testing Our cyber protection approach • In-house continuous testing is leveraged to identify begins with the design, issues early. development and testing. • Testing is geared to each product’s function and target environments may include: Based on Microsoft Soft
Slide 14: Lifecycle Management: Testing certifications
Cyber Solutions Lifecycle Management Testing Our cyber protection approach • Cybersecurity certifications and approvals provide begins with the design, specific security assurance as required development and testing. Based on Microsoft Software Development Lifecycle (SDL) Design Develop Require Test
Slide 15: Lifecycle Management: Rapid Response
Cyber Solutions Lifecycle Management Rapid Response Our cyber protection approach • Through the rapid incident response service, our begins with the design, dedicated cybersecurity team quickly assesses new development and testing. threats and vulnerabilities and advises customers on how they may re
Slide 16: Shared Responsibility
Cyber Solutions Shared Responsibility • Market facing programs Since protecting against cyber • Promote customer engagement through threats is a shared responsibility, Customer education we engage in market facing • Compliance guidelines programs to provide customer • Cybersecurity documentation eng
Slide 17: The benefits of a comprehensive program
Cyber Solutions The benefits of a comprehensive program Policy Driven Team Cybersecurity is not an afterthought Disruption is Not an Option Secure Development Product designed to be more cyber-resilient A Higher Level Commitment Testing Testing focused on discovering and addressing critical vulnerab
Slide 18: The product security program is applied to all brands
Cyber Solutions The product security program is applied to all brands 18 Johnson Controls — Copyright 2019