Cybersecurity in Agriculture Act of 2025
- Sponsor
- Rep. Nunn, Zachary [R-IA-3]
- Committees
- Agriculture Committee (primary)
- Last action
- Jun 17, 2025
Bottom line
This bill aims to bolster the cybersecurity of the U.S. agriculture sector by establishing dedicated regional research, development, and training centers.
What it actually does
This bill amends the National Agricultural Research, Extension, and Teaching Policy Act of 1977 to direct the Secretary of Agriculture to establish a program for Agriculture Cybersecurity Centers. The program would competitively award grants to eligible entities to create five Regional Agriculture Cybersecurity Centers, establish a national network of these centers, and designate one college or university to coordinate the network. These centers would conduct research, develop tools, provide training, and build testbeds to enhance cybersecurity across various agricultural sectors and the supply chain.
Proponents argue
Supporters argue that the agriculture sector is a critical infrastructure increasingly vulnerable to sophisticated cyberattacks, which could severely disrupt food production, supply chains, and national economic stability. Establishing dedicated cybersecurity centers, as proposed, would provide essential research, develop tailored protective technologies, and train a specialized workforce, thereby proactively safeguarding this vital sector against evolving digital threats and ensuring food security.
Opponents contend
Potential opponents might raise concerns about the fiscal implications of authorizing $25 million annually for new centers, questioning whether this is the most efficient use of federal funds. They might also argue that existing cybersecurity agencies and programs could potentially expand their scope to cover agricultural needs, possibly leading to bureaucratic overlap or redundancy rather than a streamlined approach.
The bill is very short and clearly written, making it highly accessible for a quick and thorough evaluation by any interested reader.
Section 2, adding Section 1473I(a) to Subtitle K of the National Agricultural Research, Extension, and Teaching Policy Act of 1977
Establishment of Regional Agriculture Cybersecurity Centers Program
This provision directs the Secretary of Agriculture, in consultation with the Secretary of Homeland Security, to create a program. This program will award grants or cooperative agreements on a competitive basis to establish five Regional Agriculture Cybersecurity Centers. These centers are tasked with conducting research, development, and education specifically on agriculture cybersecurity, covering areas like seed agriculture, horticulture, animal agriculture, and the broader agriculture supply chain. The program also mandates the creation of a national network of these centers, with one college or university designated to coordinate its activities.
Supporters argue
Supporters argue that a coordinated national effort with regionally distributed centers is essential to effectively address the diverse and evolving cybersecurity threats facing the agricultural sector. This structure ensures that solutions are tailored to specific agricultural sub-sectors and geographic needs, fostering crucial collaboration across regions and stakeholders.
Critics contend
Critics might contend that establishing five new regional centers and a national network could lead to redundancy with existing cybersecurity efforts or create unnecessary bureaucratic layers. They might suggest that such an approach could dilute resources rather than consolidating them for maximum impact within existing federal frameworks.
Tradeoffs
The bill navigates the tension between creating a dedicated, specialized infrastructure for agricultural cybersecurity and potentially integrating these needs into broader national cybersecurity initiatives. It prioritizes a specialized, sector-specific approach over a more generalized one.
Section 2, adding Section 1473I(b)
Duties of Regional Agriculture Cybersecurity Centers
This section specifies the core responsibilities of the newly established Regional Agriculture Cybersecurity Centers. These duties include conducting research on cybersecurity systems tailored for the agriculture sector, developing security operations centers to analyze threats, creating new cybersecurity technologies and tools (such as intrusion detection and secure network architectures), building live testbeds for assessing and refining these technologies, and conducting attack/defense exercises to validate solutions. Additionally, the centers are mandated to develop and deliver cybersecurity education and training programs for agricultural stakeholders and to build regional research and development collaboration networks.
Section 2, adding Section 1473I(d)
Authorization of Appropriations
This provision authorizes Congress to appropriate $25,000,000 for each of the fiscal years 2026 through 2030 to fund the activities of the Agriculture Cybersecurity Centers program. This means that up to $25 million can be allocated annually for five years, totaling $125 million over the period, if Congress chooses to provide the funding.
Defines an 'eligible entity' as a college or university that has programs in food and agriculture sciences and cybersecurity, and that coordinates regional industry partners, cooperatives, government authorities, and other stakeholders to strengthen security, privacy, and resiliency, bolster independent networks, and develop a skilled workforce.
Section 2, adding Section 1473I(c)
Why it matters:This is standard legislative practice for defining terms that govern program eligibility and operational scope.
Case for: Proponents argue that this specific definition ensures that only institutions with a comprehensive approach—combining academic expertise with practical industry and government collaboration—are eligible to lead these critical centers. This promotes the development of effective, real-world solutions and broad stakeholder engagement.
Case against: Some might contend that the definition is overly prescriptive, potentially limiting the pool of eligible institutions. It could inadvertently exclude smaller but highly innovative institutions or specialized research groups that could contribute valuable expertise but might not meet all the broad coordination requirements.
Estimated impact: This definition directly shapes the institutional landscape of the program, ensuring that the centers are established within entities capable of fostering broad collaboration and practical application, thereby enhancing the program's overall reach and effectiveness.