NIST Cybersecurity Framework 2.0
A free framework, voluntary for most organisations, for governing, identifying and reducing cyber risk. Version 2.0 (February 2024) added a sixth function, Govern.
Bringing producers, processors, integrators and cyber leaders together to protect high-throughput poultry operations and the wider supply chain.
Poultry operations connect farms, hatcheries, feed systems, processing plants and cold-chain distribution. The hub turns shared operational risk into coordinated industry action.
Timely, food-sector context on emerging threats and defensive priorities.
Small, trusted conversations between operators, practitioners and partners.
Scenario-led sessions for testing decisions before a real incident.
Focused collaboration on common controls, dependencies and good practice.
Peer discussions designed for boards and operational leadership.
Useful outputs shaped by the people responsible for food operations.
Digital systems now sit inside the processes that keep products safe, production moving and customers supplied.
Ransomware can halt high-throughput production and create immediate animal-welfare and food-safety consequences.
Ventilation, feeding and environmental controls expand the operational attack surface.
Shared platforms and suppliers can spread risk across farms and processing sites.
The frameworks organisations build on, and the rules worth knowing where they operate.
A free framework, voluntary for most organisations, for governing, identifying and reducing cyber risk. Version 2.0 (February 2024) added a sixth function, Govern.
The international standard for an information security management system. Organisations can be certified against it by an accredited certification body.
A series of standards for securing industrial automation and control systems — the operational technology that runs plants, farms and warehouses.
Why it matters
Helps secure connected production equipment without compromising availability.
Read moreThe EU's cybersecurity directive, applied through each country's own law, covers food businesses engaged in wholesale distribution and industrial production and processing — generally medium-sized and large ones.
Why it matters
Poultry processors in scope must manage cyber risk across their suppliers and report a significant incident — an early warning within 24 hours.
Read moreRequires firms handling foods on FDA's Food Traceability List to record key data elements at critical tracking events such as shipping and receiving.
Why it matters
Shell eggs are on the list (poultry meat, regulated by USDA, is not), and FDA can ask for the records within 24 hours in an outbreak or recall — so the systems holding them must stay available and accurate.
Read moreSince May 2025, businesses in Australia with turnover over A$3 million, and many critical infrastructure operators, must report any ransomware or cyber-extortion payment to the government within 72 hours.
Why it matters
Deciding how a site would respond to extortion, before it happens, is now part of being ready to report.
Read moreA starting point, not legal advice — which rules apply depends on where and how your organisation operates.
Bringing the right disciplines to the same table — from operators and producers to security practitioners and technology partners.
Be one of the first members of this hub — applications are open.
Member companies CSAFI adds to this hub will appear here.
No upcoming events are tagged to this hub yet — every CSAFI event is on the events page.
Join the people strengthening cybersecurity across the food ecosystem — before the next disruption tests us.