How farms are protecting their networks from cyberattack

Glacier FarmMedia – Jessica Bickle and her family have created simple and practical protocols to protect the hog farm’s network from cyberattack.

That includes computers that log out after a timed inactivity and having separate logins for each employee. The Bruce County farm also does not operate on a public Wi-Fi network as apps on their phones connect to their barns, and that’s a risk if they connect to public networks.

“We’ve created segmented networks, so our personal internet use (Netflix, shopping) is on a different network from the network we use for our business,” Bickle said. “We use 2-factor authentication (2FA), as often as possible, to verify our account with a code sent to our cell or email, in addition to logging in.”

Bickle and some other farmers are well ahead of most in their managing of risk of cyberattacks, but Ontario Pork is creating a training program to help those who still need work on their cybersecurity.

Bickle had a notification on their computer of a questionable login to a sow barn ventilation system. That computer was linked to all the software and technology used in the barn such as ventilation, electronic feeding stations and production data. She reached out to Ontario Pork and was put in touch with Brett Leslie, digital marketing lead at Ontario Pork.

There ended up being no concern, but it set them on a path to better cybersecurity.

“In my opinion, the biggest cybersecurity challenge for farmers is the lack of clear, practical guidance,” said Brett Leslie, digital marketing lead with Ontario Pork . “Farmers recognize the importance of protecting their data but often don’t know where to start.”

Leslie is certified in cybersecurity from ISC2, an international information systems safety training program, and is using his expertise to help pork producers understand the risk of cyberattacks. He said service providers may set up systems but don’t always explain how to maintain security, such as managing passwords, updates, and access controls.

“The challenge is not a lack of effort on farmers’ part, but a lack of accessible information on what cybersecurity measures are needed and how to implement them.”

Sitting down with producers on their farms has allowed him to identify gaps and discuss practical solutions.

Having someone who understands both farming and cybersecurity makes the conversation more meaningful, and discussions shift from general advice to practical application.

He also speaks at local producer association meetings, sharing practical tips on spotting phishing emails, managing backups, and improving day-to-day security.

He said this work and research is allowing the organization to develop resources tailored specifically to hog operations that can be shared with wider membership.

People are the biggest risk

Leslie believes that cybersecurity is more than just a hardware or software issue.

“Cybersecurity on farms is really about people, not just networks. Owners, staff, and family members all play a role. Many assume it’s only about securing systems, but real security happens when everyone is involved,” he said.

He has seen farms strengthen their security simply by helping everyone understand the basics.

“When we start these conversations at producer meetings, farmers engage, ask questions, and work actively to protect their operations. The human element is their strongest asset,” he said.

Leslie has some practical recommendations for farmers:

Segment networks by setting up separate Wi-Fi networks. “Your core production systems should connect to the main network. Visitors and staff should use a separate guest network,” he said, adding most routers have a built-in guest network feature. This keeps malware from guest devices from reaching the business sytems. This feature takes about 20 minutes to set up and adds a valuable layer of protection, he said.

Two-factor authentication should be used for important accounts like banking, email, and farm software. Even if someone guesses a password, they can’t access an account without a second check on the operators phone.

Change passwords when employees leave and keep track of who has access to what software and networks.

According to a recent cybersecurity report from MNP, 61 per cent of farmers between the ages of 45 and 54 rate themselves as somewhat knowledgeable about cybersecurity. Economic factors also played a role in perceived understanding with operations earning between $1 million and $2.5 million considering themselves as somewhat knowledgeable.

Farms with higher incomes are also the most targeted, with 32 per cent of operations earning more than $5 million annually reporting they have been attacked.

But any farm is vulnerable, according to John Van Engelen, who operates a 250 sow, farrow-to-finish herd with his wife Joan and their 22-year-old son Mitchell in Lambton County.

The farm uses a lot of technology – Nedap electronic sow feeders for dry sows and gilts in gestation, and farrowing feeders in the farrowing barn. Feed and animal data is integrated, and the finishing barn uses electronic sorters as well. They also have two pig performance testers that allow them to trial different things on the farm.

All of this increases efficiency, pig health and reduces labour needs, but it requires a Wi-Fi network throughout the barns. Having a large amount of data is important to every aspect of the farm, he said, and cloud-based management systems help him keep track of data in a meaningful way.

But the downside to this technology, he said, is risk.

Van Engelen believes that cybersecurity is becoming a greater risk for farms, and it is necessary to be prepared in case of a shutdown similarly to an equipment breakdown or disease outbreak.

“It is important to be aware of risks and take all precautions,” he said. An information technology company installed their Wi-Fi and monitor their network to prevent breakdowns.

Back at Bickle’s farm in Bruce County, the farm has extensive cybersecurity protocols in place such as 2FA, anti-virus protection and file backup systems to protect data and cell phones are regularly backed up to avoid data breaches.

To achieve this level of protection, the couple had Ontario Pork do an initial audit on the farm’s cybersecurity, offering a list of shortfalls and recommendations for improvements that could be made for both personal and business protection.

“They were able to give us the correct terminology, so we were better able to communicate our needs with our service providers,” she said, adding that the farm has a local technician that is used specifically for internet related issues.

“After our cyber audit, our technician was out within the week to help us make the necessary improvements to better protect ourselves.

“Honestly, anything that uses the internet can be made vulnerable, without setting up segmented networks. Ensuring that all business-related tasks are done on a protected network, and having protected ‘guest networks’, gives our farm a lot of peace of mind,” she said.

Using public Wi-Fi on her phone was another eye opener.

“The arena specifically has minimal service, and to keep the kids busy it would be nothing to log into Netflix on the open network, with my phone,” she said.

“My phone also has apps that are connected to my banking, as well as our business, and connecting onto that network left us extremely vulnerable, but at the time of logging on, I didn’t think about how I was leaving myself vulnerable.”

She said when farmers purchase equipment that provides an instant benefit to their operation, protecting themselves cyber threats isn’t discussed or thought of at the time. She recommends that farmers explore opportunities to learn more through organizations like Ontario Pork.

“Often times, they already have software protection in place on their end, and it is up to us as producers to ensure we do the same,” she said.

“If you’re not familiar with technology, and how to better protect yourself while using it, I recommend reaching out to your internet provider, and your specific industry groups. Often, they have individuals who can see the shortfalls and can recommend providers who can help you make the necessary upgrades.”