Johnson Controls International plc

The filings describe a company whose headline numbers are moving modestly while its disclosed risk profile remains broad. Fiscal 2025 revenue of $23.6 billion is a small increase over fiscal 2024, but it is still below fiscal 2023, so the trend is not a clear recovery on a multi-year view. The 10-Q says the company's market risk exposures had not materially changed since the 10-K, and that disclosure controls were effective as of March 31, 2026, with no significant changes to internal control over financial reporting in the quarter. Those statements are useful, but they do not explain the revenue movement. The risk-factor text places the most weight on cybersecurity, AI and connected products. The company says its OpenBlue platform and other digital products add exposure, and that customers, including the U.S. government, are requiring stronger cybersecurity standards that may add cost. The filing also flags proposed regulation of biometric security technology, which could affect the security business. Fire and security products carry licensing and telephone-network dependencies, and the HVAC business faces refrigerant and fluorinated gas rules that require ongoing capital spending. The 10-K says fiscal 2025 compliance-only capital spending was not material. Legal and environmental matters are also significant. The Gumm case is dismissed at the trial level but under appeal. Note 20 of the 10-K and Note 18 of the 10-Q are cross-referenced for environmental, asbestos and self-insured liabilities, and readers may want to look at those notes directly rather than relying on the summaries here. The filing reports a fiscal 2025 OSHA TRIR of 0.34 and LTIR of 0.15, which are operational safety measures rather than financial ones. No Beneish M-Score, Piotroski F-Score, Altman Z-Score or Fog Index is on file for this company, so none is assessed here. Readers should not infer any forensic result from this text. The excerpts are also partial, so a complete reading of the full 10-K and 10-Q would be needed before drawing firm conclusions.

Catalyst.The excerpts provided do not include a full MD&A results discussion, so the business drivers below are limited to what the data shows. Annual revenue was $23.6 billion for fiscal 2025 (year ended September 30, 2025), up from $22.95 billion in fiscal 2024, an increase of about 2.8%. That remains below the $26.79 billion reported for fiscal 2023, a decline of about 11.9% over two years. The 10-K risk-factor text describes a strategic emphasis on energy efficiency, decarbonization and mission-critical environments, and names the OpenBlue software platform and digital product capabilities as areas of ongoing investment. Readers may want to look at the MD&A results section of the full 10-K for the segment-level explanation of these figures.

Hidden risk.The most material tension in the excerpts is cybersecurity. The 10-Q risk factors say the company has experienced cybersecurity incidents and will likely continue to, and a September 2023 event affected employee, job applicant and personal data. The filing also states that losses could exceed available insurance coverage and that some contracts lack limitation-of-liability clauses. Separately, the Gumm v. Molinaroli class action, filed in May 2024 in Wisconsin state court over the 2016 Johnson Controls and Tyco merger, was dismissed on March 28, 2025. Plaintiffs have appealed, and the timing of a decision is unknown. Legacy PFAS firefighting foam exposure is also disclosed as an ongoing regulatory matter.