"DOJ's $2 Million Honeywell Settlement Under the Civil Cyber-Fraud Initiative: What Compliance Failures Mean for Defense Contractors

The Department of Justice (DOJ) continues to use the False Claims Act (FCA) to pursue government contractors for alleged failures to comply with contractual cybersecurity requirements. On September 1, DOJ announced that Honeywell Aerospace Inc. agreed to pay $2,042,518 to resolve allegations that a Honeywell business unit failed to comply with required cybersecurity controls under a Department of War (DoW) contract. The settlement is the latest example of DOJ treating cybersecurity compliance as more than an information technology issue. For federal contractors, deficiencies in required cybersecurity controls can also create significant FCA exposure.