; (3) the current capability and readiness of the Federal Government, State and local governments, and private sector entities to prevent, detect, respond to, and recover from cyberattacks and incidents described in paragraph (2); (4) the existing policies, standards, guidelines, best practices, and initiatives applicable to the agriculture and food critical infrastructure sector to enhance defensive measures in that sector; (5) the gaps, challenges, barriers, or opportunities for improving defensive measures in the agriculture and food critical infrastructure sector; and (6) any recommendations for Federal legislative or administrative actions to address the cybersecurity threats to, and security vulnerabilities in, the agriculture and food critical infrastructure sector. (b) Biennial report Not later than 1 year after the date of enactment of this Act, and every 2 years thereafter, the Secretary shall submit a report on each study conducted under subsection (a) to— (1) the Committee on Agriculture, Nutrition, and Forestry of the Senate; (2) the Committee on Homeland Security and Governmental Affairs of the Senate; (3) the Committee on Agriculture of the House of Representatives; and (4) the Committee on Homeland Security of the House of Representatives. 4. Food security and cyber resilience simulation exercise (a) Establishment The Secretary, in coordination with the Secretary of Homeland Security, the Secretary of Health and Human Services, the Director of National Intelligence, and the heads of other relevant Federal agencies, shall conduct, over a 5-year period, an annual cross-sector crisis simulation exercise relating to a food-related emergency or disruption (referred to in this section as an exercise ). (b) Purposes The purposes of each exercise are— (1) to assess the preparedness and response capabilities of Federal, State, Tribal, local, and territorial governments and private sector entities in the event of a food-related emergency or disruption