; and (v) include materials specifically aimed at assisting small business concerns and non-technical users in the food and agriculture industry with critical cybersecurity protections related to the food and agriculture industry, including recommendations on how to respond to a ransomware attack and resources for additional information, including the Stop Ransomware website hosted by the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security. (C) Existing platform or website The Assistant Secretary may establish the clearinghouse on an online platform or a website that is in existence as of the date of enactment of this Act. (2) Consolidation of food and agriculture industry cybersecurity recommendations (A) In general The Assistant Secretary, in consultation with the Administrator of the Farm Service Agency of the Department of Agriculture and relevant Sector Risk Management Agencies, shall consolidate public and private sector best practices to produce a set of voluntary cybersecurity recommendations relating to the development, maintenance, and operation of the food and agriculture industry. (B) Requirements The recommendations consolidated under subparagraph (A) shall include, to the greatest extent practicable, materials addressing the following: (i) Risk-based, cybersecurity-informed engineering, including continuous monitoring and resiliency. (ii) Planning for retention or recovery of positive control of systems in the food and agriculture industry in the event of a cybersecurity incident. (iii) Protection against unauthorized access to critical functions of the food and agriculture industry. (iv) Cybersecurity against threats to products of the food and agriculture industry throughout the lifetimes of those products. (v) How businesses in the food and agriculture industry should respond to ransomware attacks, including details on the legal obligations of those businesses in the event of such an attack, including reporting requirements and Federal resources for support.