NIST Cybersecurity Framework 2.0
A free framework, voluntary for most organisations, for governing, identifying and reducing cyber risk. Version 2.0 (February 2024) added a sixth function, Govern.
Bringing food-tech innovators, ingredient businesses, research teams, technology partners and cybersecurity leaders into one resilience community.
Fast-moving food technology organisations rely on cloud services, intellectual property, research data and connected platforms. The hub protects innovation as companies scale.
Timely, food-sector context on emerging threats and defensive priorities.
Small, trusted conversations between operators, practitioners and partners.
Scenario-led sessions for testing decisions before a real incident.
Focused collaboration on common controls, dependencies and good practice.
Peer discussions designed for boards and operational leadership.
Useful outputs shaped by the people responsible for food operations.
Digital systems now sit inside the processes that keep products safe, production moving and customers supplied.
Formulations, research and process innovations are high-value targets for industrial espionage.
Rapid growth can outpace governance across identities, workloads and third-party services.
Young companies often depend on concentrated technology and manufacturing partners.
The frameworks organisations build on, and the rules worth knowing where they operate.
A free framework, voluntary for most organisations, for governing, identifying and reducing cyber risk. Version 2.0 (February 2024) added a sixth function, Govern.
The international standard for an information security management system. Organisations can be certified against it by an accredited certification body.
A series of standards for securing industrial automation and control systems — the operational technology that runs plants, farms and warehouses.
Why it matters
Helps secure connected production equipment without compromising availability.
Read moreSets cybersecurity rules for connectable hardware and software sold in the EU. Manufacturers have had to report actively exploited vulnerabilities and severe incidents since 11 September 2026; the main obligations apply from 11 December 2027.
Why it matters
Makers of connected food equipment and software for the EU market need secure-by-design products and a way to handle vulnerabilities.
Read moreAn AICPA-defined report, often requested by customers, in which an independent auditor examines a service provider's controls for security, availability, processing integrity, confidentiality or privacy.
Why it matters
Food-tech platforms selling to large food companies are often asked for one during procurement.
Read moreThe EU's cybersecurity directive, applied through each country's own law, covers food businesses engaged in wholesale distribution and industrial production and processing — generally medium-sized and large ones.
Why it matters
Ingredient producers engaged in industrial processing can be in scope when they are medium-sized or large.
Read moreA starting point, not legal advice — which rules apply depends on where and how your organisation operates.
Bringing the right disciplines to the same table — from operators and producers to security practitioners and technology partners.
Be one of the first members of this hub — applications are open.
Member companies CSAFI adds to this hub will appear here.
Curated learning guide by Robert M. Lee compiling foundational books, training courses, standards, labs, tools, and reference materials.
Legislative coverage of the U.S. Farm and Food Cybersecurity Act, explaining proposed requirements for biennial cybersecurity assessments of the agriculture and food sector.
Canadian multi-institution research and training program developing cybersecure, reliable, and equitable AgFoodTech through interdisciplinary collaboration between computer science, cybersecurity & AI
University of Guelph feature describing the Cyber Science Lab's agri-food cybersecurity initiative, including AI-powered monitoring, tabletop exercises and cybersecurity self-assessment tools.
Open-access research paper proposing PrivChain, a privacy-preserving blockchain framework that combines Hyperledger Fabric and Zero-Knowledge Proofs (ZKPs) to enable secure provenance, traceability, a
IEEE conference paper proposing a real-time food supply chain traceability system that integrates HACCP, blockchain, IoT, and BigchainDB to improve food safety, transparency and trust.
IEEE conference paper presenting AgriBlockIoT, a decentralized IoT-enabled blockchain traceability platform for agri-food supply chains
IEEE paper proposing a Food Supply Chain Traceability System (FSCTS) using Ethereum smart contracts and IPFS to improve secure, scalable, and tamper-resistant food traceability.
IEEE conference paper proposing a blockchain-based decentralized traceability system for verifying certified organic food authenticity, improving transparency, provenance, and trust.

Price: Free
Alfa Laval
Price: Free
University of Guelph
Price: Free
University of GuelphJoin the people strengthening cybersecurity across the food ecosystem — before the next disruption tests us.