NIST Cybersecurity Framework 2.0
A free framework, voluntary for most organisations, for governing, identifying and reducing cyber risk. Version 2.0 (February 2024) added a sixth function, Govern.
Bringing frozen food manufacturers, cold-storage operators, refrigeration specialists and cyber experts together to protect products that must never thaw.
Frozen food depends on blast freezers, continuous processing lines and sub-zero storage running around the clock. The hub focuses on resilience where a refrigeration outage can write off an entire inventory.
Timely, food-sector context on emerging threats and defensive priorities.
Small, trusted conversations between operators, practitioners and partners.
Scenario-led sessions for testing decisions before a real incident.
Focused collaboration on common controls, dependencies and good practice.
Peer discussions designed for boards and operational leadership.
Useful outputs shaped by the people responsible for food operations.
Digital systems now sit inside the processes that keep products safe, production moving and customers supplied.
Compromised freezer, compressor or building-management controls can thaw stock before anyone notices.
Disruption to blanching, freezing and packing lines stops output with little room for recovery.
Third-party cold stores and logistics providers concentrate risk across many brands.
The frameworks organisations build on, and the rules worth knowing where they operate.
A free framework, voluntary for most organisations, for governing, identifying and reducing cyber risk. Version 2.0 (February 2024) added a sixth function, Govern.
The international standard for an information security management system. Organisations can be certified against it by an accredited certification body.
A series of standards for securing industrial automation and control systems — the operational technology that runs plants, farms and warehouses.
Why it matters
Helps secure connected production equipment without compromising availability.
Read moreThe EU's cybersecurity directive, applied through each country's own law, covers food businesses engaged in wholesale distribution and industrial production and processing — generally medium-sized and large ones.
Why it matters
Frozen food manufacturers engaged in industrial processing are in scope when they are medium-sized or large, including duties for their supply chain.
Read moreShippers, loaders, carriers and receivers moving food by road or rail in the US must keep it safe — including temperature control where needed — with written procedures and records.
Why it matters
Keeping product frozen in transit is part of compliance, so lost or altered temperature records become a food-safety problem as well as an IT one.
Read moreSince May 2025, businesses in Australia with turnover over A$3 million, and many critical infrastructure operators, must report any ransomware or cyber-extortion payment to the government within 72 hours.
Why it matters
Australian frozen food businesses above the threshold must report a ransomware payment within 72 hours — worth deciding in advance how you would respond.
Read moreA starting point, not legal advice — which rules apply depends on where and how your organisation operates.
Bringing the right disciplines to the same table — from operators and producers to security practitioners and technology partners.
Be one of the first members of this hub — applications are open.
Member companies CSAFI adds to this hub will appear here.
Curated learning guide by Robert M. Lee compiling foundational books, training courses, standards, labs, tools, and reference materials.
Legislative coverage of the U.S. Farm and Food Cybersecurity Act, explaining proposed requirements for biennial cybersecurity assessments of the agriculture and food sector.
The foundational framework for managing cybersecurity risk — Govern, Identify, Protect, Detect, Respond, Recover. The common language most food-industry security programmes build on.
IEEE conference paper proposing a real-time food supply chain traceability system that integrates HACCP, blockchain, IoT, and BigchainDB to improve food safety, transparency and trust.
IEEE conference paper presenting AgriBlockIoT, a decentralized IoT-enabled blockchain traceability platform for agri-food supply chains
IEEE paper proposing a Food Supply Chain Traceability System (FSCTS) using Ethereum smart contracts and IPFS to improve secure, scalable, and tamper-resistant food traceability.
IEEE conference paper describing the design and implementation of an IoT-enabled blockchain food traceability system integrating QR codes, RFID, and barcodes to improve food safety and transparency.
Peer-reviewed open-access paper proposing a Hyperledger Fabric-based blockchain platform for secure, tamper-resistant agri-food supply chain traceability, quality assurance, and regulatory compliance.
Peer-reviewed review paper proposing the Cyber-FSMS (Cyber Food Safety Management System) framework, integrating food defense methodologies (HACCP, TACCP, VACCP) with cybersecurity, OT security, and c

Price: Free
Center for Dairy Research
Price: Free
CSAFI
Price: Free
CSAFIJoin the people strengthening cybersecurity across the food ecosystem — before the next disruption tests us.