CISA Critical Infrastructure · Food & Agriculture · SMB Focus

Cybersecurity
for America's
Food Supply

CrossSight deploys the CS-ACRF framework — a scalable, sector-specific cybersecurity methodology — to protect the 2.1M farms, 935,000 restaurants, and 200,000 processing facilities that feed the United States.

$11B+ Losses from Food Ag cyber attacks

16th CISA Critical Sector — least protected

2.1M US farms at risk without defense

Explore the Platform → Industry Impact

Sector Threat Feed LIVE

JBS USA CRITICAL

REvil ransomware — $11M paid. USDA pricing halted 1-Jun-2021. Plants in UT, TX, WI, NE offline.

Dole Food Company HIGH

Ransomware attack — Feb 2023. North America operations suspended. Salad plants shut down.

Sysco Corporation HIGH

Data breach — 2023. 126,000 employees affected. Supply chain intelligence exposed.

NEW Holland Agriculture CRITICAL

OT/ICS attack — 2022. Manufacturing disrupted during harvest season. Parts supply chain impacted.

About CrossSight

Built for the gap no one filled

Mission

CrossSight exists to make Food & Agriculture cybersecurity accessible, affordable, and sector-specific — deploying the CS-ACRF framework across the 2.1 million farms, processors, and distributors that major vendors have never served.

CrossSight was founded on a straightforward observation: the sector that feeds America is the least protected of all 16 CISA Critical Infrastructure categories. Enterprise cybersecurity firms focus on Fortune 500 clients. Government programs target large entities. The SME agricultural producer — the backbone of the US food supply — is left entirely on its own.

After two decades of deploying security architectures for organizations across the Americas — from financial institutions to mining operations to agricultural enterprises — Gina A. Gómez García developed CS-ACRF: a methodology built specifically for the operational, technological, and budgetary realities of food and agriculture businesses.

CrossSight is the vehicle to bring that framework to the US market at national scale — through certified professionals, bilingual delivery, and a replicable deployment model that grows with the network.

Our Values

Principles that drive every engagement

🎯

Sector Precision

Generic frameworks fail agriculture. Every CS-ACRF control is calibrated for the specific risk profile of food production, processing, and distribution environments.

📏

SME Realism

Our solutions are designed for small and mid-sized operators — not Fortune 500 IT teams. Feasible controls, clear language, manageable budgets.

🌐

Bilingual Service

25% of US farm labor is Hispanic. CrossSight delivers fully bilingual assessments, documentation, and training — reaching underserved communities others ignore.

📊

Measurable Results

Every engagement is anchored to quantifiable outcomes: risk reduction percentages, conflict elimination rates, recovery time objectives. No vague assurances.

🔁

Scalable Impact

CS-ACRF is documented, certifiable, and transferable. A growing network of certified partners multiplies impact nationally without sacrificing quality.

🛡️

National Commitment

Food security is national security. CrossSight's work directly aligns with CISA mandates, Executive Orders 14028 and 14144, and the congressional Food & Ag Cybersecurity Act.

Gina A. Gómez García

FOUNDER & CEO · CYBERSECURITY ARCHITECT · CS-ACRF AUTHOR

Gina brings 20 years of progressive cybersecurity leadership across Food & Agriculture, mining, manufacturing, Oil & Gas, and technology sectors, deploying enterprise security architectures.

She holds AWS Security Specialty, Google Cloud Professional Cloud Architect, and SAP HANA Security credentials. Her 20 years of field experience — from implementing SOC operations to designing Zero Trust cloud architectures — is the intellectual foundation of the CS-ACRF framework.

AWS Security Specialty Google Cloud Architect CISM — ISACA SAP HANA Security MSc Cybersecurity CS-ACRF Author 20yr Critical Infrastructure

Industries We Serve

Sector-specific security for every critical vertical

CrossSight's CS-ACRF methodology was built for the realities of operational technology environments, legacy systems, and resource-constrained teams. While Food & Agriculture is our primary focus, the framework's principles apply directly across adjacent critical sectors where the same gaps exist.

Food & Agriculture

Primary focus sector. The Food & Agriculture industry feeds 330 million Americans but remains the least cybersecure of all 16 CISA Critical Infrastructure sectors. Farms, processors, cooperatives, and distributors operate with minimal IT staff, seasonal workforce fluctuations, and deeply embedded OT/ICS systems that were never designed with cybersecurity in mind.

CrossSight's CS-ACRF was purpose-built here — validated across grain cooperatives, meat processors, produce distributors, and cold-chain logistics operators. Our bilingual service model reaches Hispanic-owned farms, which represent 25% of US agricultural labor and operate with below-average security resources.

Ransomware targeting grain elevator OT systems (BlackByte, LockBit)

ERP credential stuffing and supply chain data interception

Irrigation and cold-chain ICS sensor manipulation

Phishing targeting food safety and compliance teams

CISA Sector EO 14028/14144 Bilingual Delivery OT/ICS Specialization

$11B+

Total losses from Food & Ag cyber incidents in the last 5 years

2.1M

US farms currently without viable sector-specific cybersecurity protection

100%

SoD conflict elimination achieved at Lundin Gold using CS-ACRF methodology

87%

Average risk reduction after full CS-ACRF Phase 4 deployment

Manufacturing & Industry

OT/ICS-heavy environments with legacy exposure. Manufacturing facilities share many of the same cybersecurity vulnerabilities as Food & Agriculture — operational technology running decades-old software, converging IT/OT networks, and high-value targets attractive to ransomware groups seeking operational disruption.

CS-ACRF's Control Implementation pillar was validated directly in manufacturing environments. At JUKI USA, CrossSight's founder achieved a 70% reduction in access-related risk — redesigning the entire SAP security model, implementing least-privilege controls, and hardening the cloud security architecture across Florida operations.

Ransomware targeting production line control systems (OT disruption)

Insider threat via excessive SAP ERP access privileges

Supply chain partner compromise through API and EDI integrations

IT/OT network convergence creating unmonitored attack surfaces

SAP S/4HANA Security OT/IT Convergence SOX Compliance Cloud Migration

70%

Access risk reduction achieved at JUKI USA (Florida) — CrossSight validated result

$4.4M

Average cost of a manufacturing sector data breach (IBM Security 2023)

65%

Of manufacturing firms report OT systems connected to corporate IT networks without adequate segmentation

11x

Return on security investment — every $1 in CS-ACRF avoids $11 in breach-related losses

Retail & Distribution

High-volume transaction environments with complex access control needs. Retail and distribution companies operate across multiple entities, geographies, and ERP modules — creating significant Segregation of Duties risk, third-party access vulnerabilities, and data exposure across payment and logistics systems.

CrossSight's founder has executed SAP security rollouts for major retail operations including Grupo PIT / Domino's Pizza Central America (SAP S/4HANA across multiple countries), Grupo Valorem (7-entity rollout), and ALFA Colombia — bringing deep experience in multi-entity, multi-country SAP security architecture to complex retail environments.

POS and payment system compromise affecting customer transaction data

Multi-entity SoD violations creating fraud risk across ERP modules

Third-party logistics provider access exploitation

Inventory and procurement data manipulation by privileged insiders

Multi-Entity SAP SoD Matrix Design GRC Access Control Multi-Country Rollout

60%

SoD conflict reduction achieved at ALFA Colombia through CS-ACRF role redesign

Entities successfully rolled out in the Grupo Valorem SAP security deployment — 100% audit compliance

40%

Reduction in access provisioning time through GRC Access Control automation

Countries covered in CrossSight founder's retail SAP security experience across Central and South America

The Problem

America's food chain is digitally exposed

The Food & Agriculture sector feeds 330 million Americans — but it remains the least cybersecure of all 16 CISA Critical Infrastructure sectors. Small and mid-sized producers, processors, and distributors lack the internal resources, technical expertise, and budget to defend against evolving cyber threats.

A single ransomware attack on a major processor can halt national food pricing data, idle plants across five states, and leave grocery shelves bare — as JBS USA demonstrated in 2021. These aren't isolated events: they are systemic vulnerabilities baked into the supply chain architecture.

The US government recognizes the threat. Executive Order 14028 (2021) and EO 14144 (2025) mandate stronger cybersecurity across critical sectors — yet the Food & Agriculture gap remains unfilled.

JBS USA — 2021

REvil (Russia) ransomware · 5 states offline · USDA data halted

$11,000,000 ransom paid

Dole Food Company — 2023

Ransomware · North America ops suspended · Salad plants offline

Estimated $10M+ operational losses

Sysco Corporation — 2023

Data breach · 126K employees · Supply chain intelligence exposed

$95M remediation costs

Schreiber Foods — 2021

Ransomware shutdown · Cheese processing halted · 3-day outage

$2.5M ransom + downtime losses

The CS-ACRF Framework

A standardized methodology built for the sector

CrossSight's Cybersecurity Agile Control & Risk Framework (CS-ACRF) is a proprietary, sector-specific methodology refined through 20 years of applied leadership across Food & Agriculture, mining, and industrial operations.

Unlike generic cybersecurity frameworks, CS-ACRF is engineered for the operational realities of agribusiness: seasonal workforce fluctuations, legacy OT/ICS systems, limited IT staff, and supply chain data integration. It bridges the technical gap that major vendors cannot fill at SME scale.

Validated in production at Lundin Gold (100% Segregation of Duties conflict elimination), JUKI USA (70% reduction in access-related risk), and multiple Central and South American agricultural enterprises — CrossSight brings proven results to the US market.

Asset & Access Intelligence

Complete inventory of digital assets, user access privileges, and OT/IT convergence points — the foundation every defense requires

Risk Quantification Engine

Sector-calibrated risk scoring maps exposure to financial and operational impact — giving executives business-language clarity

Control Implementation

Operationally feasible controls designed for small teams: role separation, privileged access management, incident playbooks

Continuous Monitoring & Resilience

Real-time threat indicators, anomaly detection, and quarterly review cycles ensure defenses adapt as threats evolve

CS-ACRF Deployment Cycle

PH 01

Assess

Asset discovery
Access audit
Threat mapping

PH 02

Quantify

Risk scoring
Gap analysis
Prioritization

PH 03

Harden

SoD controls
PAM deployment
Policy design

PH 04

Monitor

Threat feeds
Anomaly alerts
Quarterly review

Validated Results — LatAm

100% SoD Conflicts Eliminated — Mining Sector

70% Access Risk Reduction — Manufacturing

20yr Applied field experience

Expected Results — North America

14 US states in target coverage

9→14 US jobs created (year 1→5)

$2.1M Revenue projected by year 5

Interactive Demo

Inside the CrossSight Platform

SIMULATED ENVIRONMENT

Live Threat Monitor

Real-time threat intelligence for Food & Agriculture sector — simulated data

Sector Risk Index

Active Campaigns

Protected Entities

Simulate exposure level 74%

LowMediumHighCritical

Segregation of Duties (SoD) Conflict Map

CS-ACRF identifies privilege violations across user roles — eliminating insider risk vectors

Role	Approve PO	Execute PO	Receive Goods	Post Payment	Audit Records	Status

🔴 3 conflicts detected ✅ 1 roles clean

CS-ACRF Framework Dashboard

Deployment status — adjust phase completion to see projected risk reduction

Active deployment phase Phase 3

AssessQuantifyHardenMonitor

Business Impact Assessment

Adjust your annual revenue to see your personalized risk exposure and ROI

Annual company revenue $5M

$500K$2M$5M$10M$25M+

CrossSight Advantage

For every $1 invested in CS-ACRF implementation, a protected Food & Agriculture SME avoids an estimated $11 in breach-related losses.

National Coverage Map

CrossSight targets America's agricultural heartland — 14 states covering the highest-risk food production zones

14 Target States

2.1M Farm Enterprises at Risk

Priority Deployment Zones

Sector Segments

Why It Matters for Industries

Why CrossSight is
Critical for Every Industry

Food & Agriculture, energy, finance, and other critical sectors face escalating cyber threats that can disrupt supply chains, compromise operations, and affect communities nationwide. CrossSight delivers the specialized protection these industries need.

🏛️

CISA Critical Infrastructure

Executive Branch Designation · 16 Sectors

Food & Agriculture is one of 16 sectors designated as Critical Infrastructure by CISA. CrossSight directly addresses the least-protected sector — making its work inherently national in scope and consequence.

📜

2024 CET List — Cybersecurity

NSTC Critical & Emerging Technologies · Feb 2024

Cybersecurity Technologies appear explicitly on the National Science & Technology Council's 2024 Critical and Emerging Technologies list — underscoring the strategic importance of protecting digital infrastructure across all industrial sectors.

⚡

Executive Orders 14028 & 14144

White House · 2021 & 2025

Back-to-back executive orders mandate improved cybersecurity across critical infrastructure. CrossSight's work directly advances these presidential priorities, helping industries align with federal cybersecurity mandates.

🌾

Food & Ag Cybersecurity Act

S.2393 · 118th Congress

Legislation establishing a federal cybersecurity clearinghouse specifically for Food & Agriculture. CrossSight's CS-ACRF is exactly the kind of sector-specific framework the Act envisions — demonstrating congressional recognition of the need.

👥

Hispanic Agricultural Community

USDA Census · 67,000+ Hispanic-owned farms

25% of US farm labor is Hispanic, with 67,000+ Hispanic-owned farms operating with below-average cybersecurity resources. CrossSight's bilingual service model addresses an underserved, nationally significant population segment.

💼

US Job Creation & Workforce

Business Plan · 14-State Deployment

CrossSight will directly create 9 US jobs in Year 1, growing to 14 in Year 5, plus a national network of certified implementation partners — directly developing the cybersecurity workforce in critical infrastructure sectors.

Market Opportunity

A $2.1B+ underserved market

2.1M

US farms — primary targets

935K

Restaurants & food service

200K

Processing & manufacturing plants

$1.2M

Year 1 revenue projection

14-State Initial Deployment

FLTXCA IANEIL MNWIKS NCGAIN OHMO

The US agricultural cybersecurity market is fundamentally unserved at the SME level. Major cybersecurity vendors focus on Fortune 500 enterprises — leaving 2.1 million farms and hundreds of thousands of processors without viable, affordable, sector-specific protection.

CrossSight fills this gap with a scalable, replicable framework that can be deployed by a growing national network of certified professionals — creating a distributed, persistent security infrastructure rather than one-time consulting engagements.

The CS-ACRF methodology is documented, certifiable, and transferable — an intellectual asset that appreciates with every deployment. This distinguishes CrossSight from pure service businesses: the framework itself has national systemic value.

Business model: Initial CS-ACRF deployment (Phase 1–4) + annual Continuous Monitoring retainer + certified partner licensing fees. Revenue grows with partner network, not headcount.

$1.2M

Year 1 Revenue

$2.1M

Year 5 Revenue

Request an Assessment

Let's protect your operation

Fill out the form and Gina will personally review your situation and respond within 24 business hours. No sales pitch — a direct conversation about your specific cybersecurity exposure.

📧 Click to email CrossSight

📞 +1 (786) 589-9184

📍 111 N Orange Ave, Ste 800
Orlando, FL 32801

🌐 www.crosssights.com

🕐 Response within 24 business hours

CS-ACRF Assessment Request

Full Name *

Company / Organization *

Business Email *

Phone (optional)

Industry Sector *

Company Size *

Tell us about your situation

Your information is never shared or sold. CrossSight uses it exclusively to respond to your inquiry.

✅

Request received!

Gina will review your information and respond within 24 business hours. Check your inbox — including spam, just in case.

Cybersecurity for America's Food Supply