I 118th CONGRESS 1st Session H. R. 4387 IN THE HOUSE OF REPRESENTATIVES June 27, 2023 Mr. Nunn of Iowa (for himself and Mr. Davis of North Carolina ) introduced the following bill; which was referred to the Committee on Agriculture A BILL To amend the National Agricultural Research, Extension, and Teaching Policy Act of 1977 to direct the Secretary of Agriculture to establish a program providing for the establishment of Agriculture Cybersecurity Centers, and for other purposes.

1. Short title This Act may be cited as the Cybersecurity in Agriculture Act of 2023 . 2. Agriculture Cybersecurity Centers Subtitle K of the National Agricultural Research, Extension, and Teaching Policy Act of 1977 ( 7 U.S.C. 3319 et seq. ) is amended by adding at the end the following: 1473I. Agriculture Cybersecurity Centers (a) In general The Secretary, acting through the Director of the National Institute of Food and Agriculture, and in consultation with the Secretary of Homeland Security, shall establish a program under which the Secretary will— (1) on a competitive basis, award grants to, or enter into cooperative agreements with, eligible entities to establish 5 Regional Agriculture Cybersecurity Centers to carry out research, development, and education on agriculture cybersecurity, with respect to seed agriculture, horticulture, animal agriculture, and the agriculture supply chain; (2) establish a national network of such Regional Agricultural Cybersecurity Centers; and (3) designate one college or university to coordinate the activities of such national network. (b) Duties A Regional Agriculture Cybersecurity Center shall— (1) conduct research on cybersecurity systems for the agriculture sector, including developing cybersecurity situational awareness systems to monitor cybersecurity threats, intrusions, and anomalies; (2) develop a security operations center for the agriculture sector to analyze cybersecurity threats, intrusions, and anomalies and to recommend mitigation actions; (3) develop cybersecurity technologies and tools for the agricultural sector, including domain-specific intrusion and anomaly detection systems, domain-specific intrusion prevention systems, domain specific role-based access control and user authentication systems, lightweight device authentication protocols, and secure network architectures; (4) build live cybersecurity testbeds to assess and refine cybersecurity technologies, tools, and systems developed for the agricultural sector; (5) conduct attack/defense exercises to validate and evaluate cybersecurity solutions for field deployment and agriculture industry adoption; (6) develop cybersecurity education and training programs for agricultural stakeholders; (7) conduct cybersecurity training using the testbeds referred to in paragraph (4); and (8) build a regional research and development collaboration network. (c) Eligible entity In this section, the term eligible entity means a college or university that has programs in food and agriculture sciences and cybersecurity that coordinates regional industry partners, cooperatives, government authorities and other stakeholders to strengthen security, privacy and resiliency, bolster the independent networks, and develop a skilled workforce. (d) Authorization of appropriations There are authorized to be appropriated to carry out this section $25,000,000 for each of fiscal years 2024 through 2028. .