This bill directs USDA to assess cybersecurity threats to agriculture and food infrastructure every two years in coordination with CISA. It requires annual crisis simulation exercises for food-related emergencies involving USDA, DHS, HHS, and intelligence agencies to enhance sector resilience.
Latest Action
Read twice and referred to the Committee on Agriculture, Nutrition, and Forestry.
AI Summary
Plain-English explanation of this bill
This bill directs USDA to assess cybersecurity threats to agriculture and food infrastructure every two years in coordination with CISA. It requires annual crisis simulation exercises for food-related emergencies involving USDA, DHS, HHS, and intelligence agencies to enhance sector resilience.
Last updated: 1/5/2026
Official Summary
Congressional Research Service summary
<p><strong>Farm and Food Cybersecurity Act of 2025</strong></p><p>This bill directs the Department of Agriculture (USDA) to (1) assess cybersecurity threats in the agriculture and food critical infrastructure sector, and (2) conduct annual crisis simulation exercises for food-related emergencies or disruptions. The agriculture and food critical infrastructure sector includes (1) any activity relating to the production, processing, distribution, storage, transportation, consumption, or disposal of agricultural or food products; and (2) any entity involved in any of these activities.</p><p>Specifically, USDA, in coordination with the Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency, must conduct a risk assessment every two years on the cybersecurity threats to, and security vulnerabilities in, this sector. The risk assessment must include any recommendations for federal legislative or administrative actions to address related threats and vulnerabilities.</p><p>USDA must also conduct an annual simulation exercise relating to a food-related emergency or disruption in coordination with DHS, the Department of Health and Human Services (HHS), and the Office of the Director of National Intelligence (ODNI).</p><p>Among other things, the exercise must (1) involve a realistic and plausible scenario that simulates a food-related emergency or disruption that affects multiple sectors and jurisdictions, and (2) incorporate input from experts and stakeholders from various disciplines and sectors (e.g., agriculture, public health, emergency management, transportation, and energy). </p><p>USDA, in consultation with DHS, HHS, and ODNI, must submit a report to Congress on each simulation exercise, including recommendations to enhance the cybersecurity and resilience of the agriculture and food critical infrastructure sector.</p>
Key Points
Main provisions of the bill
Requires cybersecurity threat assessments for food sector
Mandates annual crisis simulation exercises
Coordinates USDA, DHS, HHS, and intelligence agencies
Covers production, processing, and distribution
Reports recommendations to Congress
How This Impacts Americans
Potential effects on citizens and communities
The food and agriculture sector would have stronger cybersecurity protections and preparedness. Simulated crises would test response capabilities before real emergencies occur. The bill addresses growing concerns about cyberattacks on critical food infrastructure.
Policy Areas
Primary Policy Area
Agriculture and Food
Scope & Jurisdiction
Jurisdiction Level
federal
Congressional Session
119th Congress
Citation Reference
754, 119th Congress (2025). "Farm and Food Cybersecurity Act of 2025". Source: Voter's Right Platform. https://votersright.org/bills/118-s-754
