Farm and Food Cybersecurity Act of 2025

Specifically, USDA, in coordination with the Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency, must conduct a risk assessment every two years on the cybersecurity threats to, and security vulnerabilities in, this sector. The risk assessment must include any recommendations for federal legislative or administrative actions to address related threats and vulnerabilities.

USDA must also conduct an annual simulation exercise relating to a food-related emergency or disruption in coordination with DHS, the Department of Health and Human Services (HHS), and the Office of the Director of National Intelligence (ODNI).

Among other things, the exercise must (1) involve a realistic and plausible scenario that simulates a food-related emergency or disruption that affects multiple sectors and jurisdictions, and (2) incorporate input from experts and stakeholders from various disciplines and sectors (e.g., agriculture, public health, emergency management, transportation, and energy).

USDA, in consultation with DHS, HHS, and ODNI, must submit a report to Congress on each simulation exercise, including recommendations to enhance the cybersecurity and resilience of the agriculture and food critical infrastructure sector.