NIST Cybersecurity Framework 2.0
A free framework, voluntary for most organisations, for governing, identifying and reducing cyber risk. Version 2.0 (February 2024) added a sixth function, Govern.
Connecting growers, livestock producers, cooperatives, agri-tech providers and cyber experts to protect the start of the food supply chain.
Farms increasingly run on GPS-guided machinery, irrigation and climate controls, livestock sensors and cloud farm-management platforms. The hub helps agricultural businesses stay productive when connected systems fail or are attacked.
Timely, food-sector context on emerging threats and defensive priorities.
Small, trusted conversations between operators, practitioners and partners.
Scenario-led sessions for testing decisions before a real incident.
Focused collaboration on common controls, dependencies and good practice.
Peer discussions designed for boards and operational leadership.
Useful outputs shaped by the people responsible for food operations.
Digital systems now sit inside the processes that keep products safe, production moving and customers supplied.
Ransomware or remote-access abuse can stall tractors, harvesters and feeding or milking systems at the busiest time of year.
Yield, herd and agronomy data held in cloud platforms can be stolen, encrypted or manipulated.
Shared systems between farms, cooperatives and buyers let one compromise spread along the chain.
The frameworks organisations build on, and the rules worth knowing where they operate.
A free framework, voluntary for most organisations, for governing, identifying and reducing cyber risk. Version 2.0 (February 2024) added a sixth function, Govern.
The international standard for an information security management system. Organisations can be certified against it by an accredited certification body.
A series of standards for securing industrial automation and control systems — the operational technology that runs plants, farms and warehouses.
Why it matters
Helps secure connected production equipment without compromising availability.
Read moreThe EU's cybersecurity directive, applied through each country's own law, covers food businesses engaged in wholesale distribution and industrial production and processing — generally medium-sized and large ones.
Why it matters
Farms themselves are generally outside it, but cooperatives and agribusinesses engaged in industrial processing or wholesale distribution can be in scope.
Read moreRequires firms handling foods on FDA's Food Traceability List to record key data elements at critical tracking events such as shipping and receiving.
Why it matters
Farms growing foods on FDA's list — such as leafy greens, tomatoes, peppers, cucumbers and shell eggs — must keep harvesting, cooling and shipping records, with exemptions for the smallest farms.
Read moreSince May 2025, businesses in Australia with turnover over A$3 million, and many critical infrastructure operators, must report any ransomware or cyber-extortion payment to the government within 72 hours.
Why it matters
Australian farming businesses above the threshold must report a ransomware payment within 72 hours — worth deciding in advance how you would respond.
Read moreA starting point, not legal advice — which rules apply depends on where and how your organisation operates.
Bringing the right disciplines to the same table — from operators and producers to security practitioners and technology partners.
Be one of the first members of this hub — applications are open.
Member companies CSAFI adds to this hub will appear here.
Legislative coverage of the U.S. Farm and Food Cybersecurity Act, explaining proposed requirements for biennial cybersecurity assessments of the agriculture and food sector.
Canadian multi-institution research and training program developing cybersecure, reliable, and equitable AgFoodTech through interdisciplinary collaboration between computer science, cybersecurity & AI
University of Guelph feature describing the Cyber Science Lab's agri-food cybersecurity initiative, including AI-powered monitoring, tabletop exercises and cybersecurity self-assessment tools.
The foundational framework for managing cybersecurity risk — Govern, Identify, Protect, Detect, Respond, Recover. The common language most food-industry security programmes build on.
IEEE conference paper presenting AgriBlockIoT, a decentralized IoT-enabled blockchain traceability platform for agri-food supply chains
IEEE conference paper proposing a blockchain-based decentralized traceability system for verifying certified organic food authenticity, improving transparency, provenance, and trust.
Peer-reviewed open-access paper proposing a Hyperledger Fabric-based blockchain platform for secure, tamper-resistant agri-food supply chain traceability, quality assurance, and regulatory compliance.
Peer-reviewed review paper proposing the Cyber-FSMS (Cyber Food Safety Management System) framework, integrating food defense methodologies (HACCP, TACCP, VACCP) with cybersecurity, OT security, and c
HTML version of the comprehensive open-access survey documenting 30 cybersecurity incidents (2011–2023) across the food and agriculture sector and introducing the Farmer-Centered AI (FCAI).

Price: Free
Iowa State University
Price: Free
University of Guelph
Price: Free
University of Guelph
Price: Free
CSAFI
Price: Free
CSAFIJoin the people strengthening cybersecurity across the food ecosystem — before the next disruption tests us.