Meeting summary

Quick recap

The meeting focused on cybersecurity challenges and solutions in Ontario's agri-food sector, with presentations from Rogers Cybersecure Catalyst highlighting the increasing cyber threats facing farms and suppliers. The discussion covered various cybersecurity frameworks, resources, and programs available to help protect the agri-food sector, including government-funded initiatives and self-assessment tools. The group explored specific concerns about cybersecurity awareness among small farmers, the need for accessible resources, and the intersection of cybersecurity with emerging technologies like AI and robotics, while also discussing upcoming events and opportunities for further engagement.

Next steps

• Attendees interested in cybersecurity resources to check the links shared by Luana and Shireen for Agriculture and Agri-Food Canada's toolkit.

• Attendees to consider signing up for the free Cyber Integration for Business webinar on September 29th featuring Chuck as a panelist.

• Attendees to consider registering for the 6-week Cyber Bootcamp starting October 2nd .

• Attendees to consider completing the 20-question Cyber Roadmap self-assessment tool to evaluate their cybersecurity program.

• Attendees with cybersecurity concerns or challenges to contact Luana to potentially collaborate with cybersecurity startups on custom solutions.

• Attendees to visit the Agribox Working Group at OMAFA's Innovation Tent at Canada's Outdoor Farm Show next week.

• Interested attendees to contact Kelly Knight for gate passes to the Outdoor Farm Show.

• Interested attendees to attend the AgTech Breakfast on Wednesday at the Outdoor Farm Show .

• Interested attendees to visit OMAFA's Innovation Tent at 3pm for coffee and networking.

• Interested attendees to join Taylor's webinar next week about Trade Commissioner Service opportunities in Mexico's ag tech ecosystem.

Summary

Cybersecurity for Ontario's Agri-Food Future

Luana and Lester from Rogers Cybersecure Catalyst presented on cybersecurity's role in protecting Ontario's agri-food future. They introduced their organization, which offers training, innovation, and policy work in cybersecurity, and highlighted their network of partners including the Government of Canada, Rogers, and RBC. Lester, a senior cybersecurity advisor, discussed their work with private-public organizations and running tabletop exercises to help prepare for potential cyber threats.

Cybersecurity Challenges in Agri-Food Sector

Lester presented on the state of cybersecurity in the agri-food sector, highlighting a 27% increase in ransomware incidents and noting that 50% of Canadian farms and suppliers have experienced cyber incidents, though this figure may be as high as 80% due to underreporting. He discussed key cybersecurity concerns including ransomware, remote access abuse, asset blind spots, data integrity risks, and potential safety impacts. Lester emphasized that while agri-food is identified as critical infrastructure in Canada, it remains one of the most underinvested sectors in cybersecurity, and he outlined three frameworks for improving cyber resilience.

Cybersecurity Programs and Resources Overview

Lester discussed cybersecurity frameworks and resources available in Canada and the United States, including CCCS, CESA, and NIST. He outlined two Ontario government-funded programs for small and medium-sized businesses: a webinar on September 29th featuring Chuck as a panelist, and a 6-week cyber bootcamp starting October 2nd, led by Lester and Ritesh, focusing on the agri-food sector. Lester also introduced a Cyber Roadmap self-assessment tool with a 20-question survey and the option for a one-on-one call. Luana then explained the Cyber Challenge Program, which works with cybersecurity startups to address sector-specific challenges, and requested support by sharing stories.

Cybersecurity in Agri-Food Technology

Luana discussed cybersecurity challenges in agri-food technology, emphasizing the need for proactive measures to protect against evolving threats, particularly with AI and connected devices. She invited participants to email her or connect on LinkedIn for further discussions and pilot testing opportunities. Cesar raised concerns about cybersecurity awareness among small family farms, questioning how to educate farmers about new risks. Lester suggested that Agriculture and Agri-Food Canada has resources to help raise awareness and contextualize cybersecurity risks, highlighting various attack motivations and methods, including phishing emails as a common entry point for cyber incidents.

Cyber Risk Management in Agriculture

Lester discussed the importance of developing a coherent cyber risk management framework to address the growing number of risks associated with digital devices and software applications. Luana mentioned a toolkit for agriculture and agri-food sectors, while Shireen was recognized for her leadership in this area. Cher emphasized the need for accessible resources for small and medium-sized enterprises, highlighting a toolkit that includes a case study to illustrate potential vulnerabilities and impacts. The discussion aimed to raise awareness and provide practical tools to mitigate cyber risks in the agricultural sector.

Agricultural Cybersecurity Awareness Challenges

The group discussed cybersecurity challenges in agriculture, particularly the need to raise awareness among farmers about cyber risks despite their limited exposure to incidents. Shari shared examples of cyber threats targeting dairy farmers, including email fraud and IP theft by copycat companies, while Chuck emphasized the difficulty of predicting future cyber threats due to rapid technological advances. The discussion concluded with Lester and Cher noting the importance of addressing AI-related risks and social engineering, with plans to develop resources for raising awareness among small businesses.

Cybersecurity Challenges in Insurance Sector

The group discussed cybersecurity challenges, particularly focusing on insurance companies' responses to cyber attacks. ChuckBaresich noted that insurance companies have added cybersecurity clauses but often only cover financial losses, while Lester shared that the City of Hamilton's recent cyber attack led to denied insurance claims due to lack of multi-factor authentication. Lester also mentioned Canada's efforts to collaborate with international partners to combat cybercrime, and Cesar emphasized the importance of balancing cybersecurity awareness with promoting technology adoption without creating excessive fear.

Legacy System Cybersecurity Threats

Andrew discussed cybersecurity concerns, particularly regarding physical attacks on legacy systems and equipment, and asked for perspectives on this issue. Lester emphasized the importance of safety and risk awareness, noting that while cyber incidents directly impacting equipment are not common, they have been on the rise. ChuckBaresich highlighted the intersection of cybersecurity with the right to repair movement, mentioning how third-party companies often hack ISOBUS CAN messaging systems to create tracking and logging software without manufacturer consent.

Addressing Cybersecurity in Software Access

ChuckBaresich raised concerns about farmers requesting access to robotic software, which creates potential cybersecurity vulnerabilities. Lester mentioned similar issues in smart infrastructure, where central control of IoT devices can lead to security gaps. Cher offered to create informational pieces about cybersecurity risks in software sourcing, while Shari suggested allowing some customization through a wiki-style platform and proposed using a third-party vault for source code security.

AgTech Events and Opportunities

The working group will be at Canada's Outdoor Farm Show next week in OMAFA's Innovation Tent, and Garson invited everyone to the AgTech Breakfast on Wednesday at 3 PM for coffee and snacks. Taylor announced a webinar next week from 11 AM to 12 PM about the Trade Commissioner Service in Mexico, highlighting ag tech opportunities and events. ChuckBaresich shared that nearly 100 farmers attended a Twilight Berry Growers Meeting to see presentations on robots for applying UV light to berries and other agricultural technologies. KnightKe offered to distribute gate passes for the Outdoor Farm Show, and the conversation ended with encouragement to attend the Western Fair running for the next 10 days.