Farm and Food Cybersecurity Act of 2025

This bill aims to bolster the security and resilience of the agriculture and food critical infrastructure sector against cybersecurity threats and other disruptions. It mandates the Secretary of Agriculture to undertake two primary initiatives: conducting periodic risk assessments and organizing annual simulation exercises. Specifically, the Secretary of Agriculture is directed to perform a biennial risk assessment of cybersecurity threats and vulnerabilities affecting the agriculture and food sector. These assessments will analyze the nature and impact of cyberattacks, evaluate current response capabilities, identify gaps in defensive measures, and propose legislative or administrative actions to improve security. The Secretary must consult with private sector entities, including the Food and Agriculture-Information Sharing and Analysis Center (ISAC), and submit a report on each assessment to Congress every two years. Furthermore, the bill requires the Secretary, in coordination with other federal agencies, to conduct an annual cross-sector crisis simulation exercise over a five-year period. These exercises are designed to assess preparedness, identify vulnerabilities in the food supply chain, and enhance coordination among stakeholders across various government levels and the private sector. Each exercise will involve realistic scenarios, incorporate expert input, and result in feedback for participants and a report to Congress detailing findings and recommendations for improving food security and cyber resilience. An appropriation of $1,000,000 is authorized for each fiscal year from 2026 through 2030 to carry out these exercises.