Canada鈥檚 Agricultural Foods sector could be at risk of falling victim to future cyberattacks if more measures aren鈥檛 taken.
Speaking with CTV鈥檚 Your Morning last Thursday, Beauceron Security CEO David Shipley expressed his concern by stating a lack of security measures puts a 鈥榖ig target鈥� on the sector.
鈥淭his is not a sector where there are wide margins, and the push to become even more efficient affects everything from the farm to the production and distribution to the grocery store, and this creates opportunities,鈥� Shipley said.
In 2022, a security breach left Sobeys customers unable to fulfill pharmacy prescriptions, use self-checkout machines, purchase items with gift cards or redeem loyalty points for about a week. Additionally, the cyber security incident may have .
When cyberattacks happen within the agricultural industry, Shipley said that it鈥檚 consumers who often pay the price.
鈥淭hese companies don鈥檛 absorb these costs, these costs are actually part of the inflation story we鈥檙e dealing with,鈥� he said. 鈥淚t鈥檚 a big complex issue that鈥檚 going to require us to deal with this both federally and provincially, and right now we鈥檙e not moving nearly fast enough.鈥�
Shipley said agriculture was not included in . The bill was introduced in June 2022 to establish a regulatory framework to strengthen cybersecurity for national services and systems, such as in finance, telecommunications, energy and transportation.
Shipley adds that not including agriculture as an essential service along with those listed in the bill puts a 鈥渂ig target on that sector.鈥�
鈥�(T)hey missed the boat on C-26, but their strategy, which I keep being told is coming in weeks, so hopefully this fall, the national cybersecurity strategy will also talk about agriculture,鈥� Shipley said.
Why is this happening?
According to Shipley, the cyberattacks are typically 鈥淩ussian-backed gangs.鈥� He said these groups bring in money from the attacks to their economy, which may be going towards the funding of the war in Ukraine, as 鈥淩ussia likes to hit back at those who are supporting Ukraine, and [Canada] is on the front lines.鈥�
鈥淭his is what war looks like now, and we used to, as Canadians, embrace the safety of our oceans,鈥� he said. 鈥淭here is no gap on the internet now, and we鈥檙e feeling that, and we鈥檙e not doing well taking national security seriously as a country and we have to, the time has changed.鈥�
What needs to change?
Shipley said the government needs to be prepared the event of another cyberattack on Canada鈥檚 agriculture sector.
鈥淔irst, we need more investment at the federal government in caring about this,鈥� he said. Shipley added that the industry in the United States has already started conducting exercises to identify solutions in the event of an attack.
In addition, he emphasized the need for farm technology that is able to combat cyberattacks.
Last week, the government announced through the Sustainable Canadian Agricultural Partnership for 319 farming businesses to invest in new technology and equipment. An example of what the funding can be used for includes an electric, self-propelled sprayer for nursery crops.
鈥淗ow do we make sure that farmers, who have smart tractors now which are internet connected, how do we make sure that they have the right to repair their devices, (that) those devices are being built resiliently so they can go back to being dumb tractors in the event of a cyberattack?鈥�
Shipley says the systems farmers and disruptors depend on for food production need to be safe by design, with modern and resilient regulations.
鈥淎ll these systems we depend on are secure and safe by design, for the distributors, what are the regulations and resiliency we expect, and how do we work as a country to deal with that, and at the grocery store, how do we make sure they鈥檙e resilient?鈥� he said. 鈥淭he good news is that we did see with Sobeys is that they got hit hard, but stores stayed open, they were still able to distribute food, let鈥檚 make sure that the entire food distribution network is resilient.鈥�
