I 
119TH CONGRESS 
1ST SESSION H. R. 1604 
To direct the Secretary of Agriculture to periodically assess cybersecurity 
threats to, and vulnerabilities in, the agriculture and food critical infra-
structure sector and to provide recommendations to enhance their secu-
rity and resilience, to require the Secretary of Agriculture to conduct 
an annual cross-sector simulation exercise relating to a food-related emer-
gency or disruption, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
FEBRUARY 26, 2025 
Mr. FINSTAD (for himself, Ms. TOKUDA, Mr. BACON, and Ms. DAVIDS of 
Kansas) introduced the following bill; which was referred to the Com-
mittee on Agriculture 
A BILL 
To direct the Secretary of Agriculture to periodically assess 
cybersecurity threats to, and vulnerabilities in, the agri-
culture and food critical infrastructure sector and to 
provide recommendations to enhance their security and 
resilience, to require the Secretary of Agriculture to con-
duct an annual cross-sector simulation exercise relating 
to a food-related emergency or disruption, and for other 
purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
00:08 Mar 14, 2025
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H1604.IH
H1604
kjohnson on DSK7ZCZBW3PROD with $$_JOB
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Farm and Food Cyber-
security Act of 2025’’. 
SEC. 2. DEFINITIONS. 
In this Act: 
(1) AGRICULTURE AND FOOD CRITICAL INFRA-
STRUCTURE
SECTOR.—The term ‘‘agriculture and 
food critical infrastructure sector’’ means— 
(A) any activity relating to the production, 
processing, distribution, storage, transportation, 
consumption, or disposal of agricultural or food 
products; and 
(B) any entity involved in an activity de-
scribed in subparagraph (A), including a farm-
er, rancher, processor, manufacturer, dis-
tributor, retailer, consumer, and regulator. 
(2) 
CYBERSECURITY
THREAT; 
DEFENSIVE 
MEASURE; INCIDENT; SECURITY VULNERABILITY.— 
The terms ‘‘cybersecurity threat’’, ‘‘defensive meas-
ure’’, ‘‘incident’’, and ‘‘security vulnerability’’ have 
the meanings given those terms in section 2200 of 
the Homeland Security Act of 2002 (6 U.S.C. 650). 
(3) SECRETARY.—The term ‘‘Secretary’’ means 
the Secretary of Agriculture. 
VerDate Sep 11 2014 
00:08 Mar 14, 2025
Jkt 059200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H1604.IH
H1604
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(4) SECTOR-SPECIFIC ISAC.—The term ‘‘sector- 
specific ISAC’’ means the Food and Agriculture-In-
formation Sharing and Analysis Center. 
SEC. 3. ASSESSMENT OF CYBERSECURITY THREATS AND 
SECURITY VULNERABILITIES IN THE AGRI-
CULTURE AND FOOD CRITICAL INFRASTRUC-
TURE SECTOR. 
(a) RISK ASSESSMENT.—The Secretary shall conduct 
a risk assessment, on a biennial basis, on the cybersecurity 
threats to, and security vulnerabilities in, the agriculture 
and food critical infrastructure sector, including— 
(1) the nature and extent of cyberattacks and 
incidents that affect the agriculture and food critical 
infrastructure sector; 
(2) the potential impacts of a cyberattack or in-
cident on the safety, security, and availability of 
food products, as well as on the economy, public 
health, and national security of the United States; 
(3) the current capability and readiness of the 
Federal Government, State and local governments, 
and private sector entities to prevent, detect, miti-
gate, respond to, and recover from cyberattacks and 
incidents described in paragraph (2); 
(4) the existing policies, standards, guidelines, 
best practices, and initiatives applicable to the agri-
VerDate Sep 11 2014 
00:08 Mar 14, 2025
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H1604.IH
H1604
kjohnson on DSK7ZCZBW3PROD with $$_JOB
culture and food critical infrastructure sector to en-
hance defensive measures in that sector; 
(5) the gaps, challenges, barriers, or opportuni-
ties for improving defensive measures in the agri-
culture and food critical infrastructure sector; and 
(6) any recommendations for Federal legislative 
or administrative actions to address the cybersecu-
rity threats to, and security vulnerabilities in, the 
agriculture and food critical infrastructure sector, 
including intrusive, duplicative, or conflicting regu-
latory requirements that may divert attention and 
resources from operational risk management to a 
compliance regime that impedes actual security ef-
forts. 
(b) PRIVATE
SECTOR
PARTICIPATION.—In con-
ducting a risk assessment under subsection (a), the Sec-
retary shall consult with appropriate entities in the private 
sector, including— 
(1) the sector-specific ISAC; and 
(2) the appropriate sector coordinating council. 
(c) BIENNIAL REPORT.—Not later than 1 year after 
the date of enactment of this Act, and every 2 years there-
after, the Secretary shall submit a report on each risk as-
sessment conducted under subsection (a) to— 
VerDate Sep 11 2014 
00:08 Mar 14, 2025
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H1604.IH
H1604
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(1) the Committee on Agriculture, Nutrition, 
and Forestry of the Senate; 
(2) the Committee on Homeland Security and 
Governmental Affairs of the Senate; 
(3) the Committee on Agriculture of the House 
of Representatives; and 
(4) the Committee on Homeland Security of the 
House of Representatives. 
SEC. 4. FOOD SECURITY AND CYBER RESILIENCE SIMULA-
TION EXERCISE. 
(a) ESTABLISHMENT.—The Secretary, in coordina-
tion with the Secretary of Homeland Security, the Sec-
retary of Health and Human Services, the Director of Na-
tional Intelligence, and the heads of other relevant Federal 
agencies, shall conduct, over a 5-year period, an annual 
cross-sector crisis simulation exercise relating to a food- 
related emergency or disruption (referred to in this section 
as an ‘‘exercise’’). 
(b) PURPOSES.—The purposes of each exercise are— 
(1) to assess the preparedness and response ca-
pabilities of Federal, State, Tribal, local, and terri-
torial governments and private sector entities in the 
event of a food-related emergency or disruption; 
VerDate Sep 11 2014 
00:08 Mar 14, 2025
Jkt 059200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H1604.IH
H1604
kjohnson on DSK7ZCZBW3PROD with $$_JOB