The Johnson controls cyber incident reported on the 27th September seems to have effected the U.S Department of Homeland Security.

← Back to Blog

The Johnson controls cyber incident reported on the 27th September seems to have effected the U.S Department of Homeland Security. While it is not know if DHS data was compromised, one would expect the company to have access to physical security information such as floor plans, power, gas, fuel, communications and HVAC data. “Until further notice, we should assume that [the contractor] stores DHS floor plans and security information tied to contracts on their servers,” the memo said. But it was unclear if the cybercriminal hackers accessed that information. “We do not currently know the full extent of the impact on DHS systems or facilities,”

As a thought, if the company provided similar services to the U.S military? Floor plans would be considered CUI, requiring an organisation to implement NIS SP 800-171. In the worst case if DHS data was compromised it would be encrypted.

Ted Dziekanowski Brian D. McCarthy Bob Dix Rachel V. Rose, JD, MBA

#cybersecurity #cyberriskmanagement #cyberattack

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7113433611818672128