NIST Cybersecurity Framework 2.0
A free framework, voluntary for most organisations, for governing, identifying and reducing cyber risk. Version 2.0 (February 2024) added a sixth function, Govern.
Grocery & SupermarketsCyber Resilience Hub
Bringing supermarket and grocery operators, wholesalers, payment specialists and cyber professionals together to keep shelves stocked and customers safe.
Hub overview
Collective resilience for a connected sector.
Grocery retail links tills, refrigeration, replenishment, e-commerce and distribution centres into one always-on operation. The hub focuses on keeping stores trading and customer data protected when systems are under attack.
What we do in the hub
Threat briefings
Timely, food-sector context on emerging threats and defensive priorities.
Expert roundtables
Small, trusted conversations between operators, practitioners and partners.
Resilience exercises
Scenario-led sessions for testing decisions before a real incident.
Working groups
Focused collaboration on common controls, dependencies and good practice.
Executive exchanges
Peer discussions designed for boards and operational leadership.
Research & playbooks
Useful outputs shaped by the people responsible for food operations.
The operational reality
Why Grocery needs cyber resilience
Digital systems now sit inside the processes that keep products safe, production moving and customers supplied.
Payment and loyalty fraud
High transaction volumes make card data, gift cards and loyalty accounts attractive to criminals.
Refrigeration and store systems
Connected chillers, freezers and building controls protect stock and food safety in every store.
Replenishment disruption
An outage in ordering or distribution systems can empty shelves across a whole estate within days.
Sector cyber compliance
From requirements to operational confidence.
The frameworks organisations build on, and the rules worth knowing where they operate.
Frameworks for every hub
Global Global ISO/IEC 27001
The international standard for an information security management system. Organisations can be certified against it by an accredited certification body.
Global ISA/IEC 62443
A series of standards for securing industrial automation and control systems — the operational technology that runs plants, farms and warehouses.
Why it matters
Helps secure connected production equipment without compromising availability.
Read more
Rules to know, by region
Australia Security of Critical Infrastructure Act 2018 (SOCI)
Australia's critical-infrastructure law lists food and grocery as a critical sector; the major supermarket and grocery-wholesale networks must register, report cyber incidents and maintain a risk-management programme.
Why it matters
The major supermarket and grocery-wholesale networks are named critical infrastructure, with registration, incident-reporting and risk-management duties.
Read moreGlobal PCI DSS v4.0.1
The card industry's security standard for any business that stores, processes or transmits payment card data. All of version 4's requirements have applied since 31 March 2025.
Why it matters
Every till, self-checkout, kiosk and online checkout that takes cards sits inside its scope.
Read moreUnited States FDA's Food Traceability Rule (FSMA 204)
Requires firms handling foods on FDA's Food Traceability List to record key data elements at critical tracking events such as shipping and receiving.
Why it matters
Grocery stores receiving foods on FDA's list — leafy greens, soft cheeses, shell eggs, many fish — must keep receiving records, and FDA can ask for them within 24 hours in an outbreak or recall.
Read more
A starting point, not legal advice — which rules apply depends on where and how your organisation operates.
Hub community
Connected across the food ecosystem.
Bringing the right disciplines to the same table — from operators and producers to security practitioners and technology partners.
Individual hub members
Be one of the first members of this hub — applications are open.
Ecosystem members
Member companies CSAFI adds to this hub will appear here.
Knowledge library
Explore Grocery & Supermarkets resources
Events
View all eventsUpcoming hub events
No upcoming events are tagged to this hub yet — every CSAFI event is on the events page.
Frequently asked questions
Your questions, answered.
Build a more resilient grocery industry
Join the people strengthening cybersecurity across the food ecosystem — before the next disruption tests us.