 Hi, and welcome back to the Think Tech Hawaii studios. And we're the security guy here with another episode of Security Matters Hawaii. We are kicking off part two. We've been talking about the end, not the end, but the conclusion of National Cyber Security Awareness Month, which was in October. Episode one, we talked about some of the technologies and some of the high points that came up for people with some of the information that we were able to share. And I think helped some of those folks that attended. But today we have a special guest in-house, Ray Nodhioki is here from the state of Hawaii. He's the cyber security coordinator for the state of Hawaii. And he helped put all this together this month. And I really wanted to thank you for doing that. I know that our audience wants to thank you for doing that. We were out in the public in a big way. So tell me, how did that come about for you? Did you the governor walked in and says, give me a cyber security program? Or did you get to work on it yourself? I basically worked on it myself. But with really the guidance from my boss, D. Cook, who is the administrator for the Office of Homeland Security in the Department of Defense in the state of Hawaii. Okay. So we started this kind of last year. She wanted me to really go out and do community outreach. There's a lot of areas that are being worked on, but a lot of people are working in those areas. And I was one of them. I'm talking the more the darker side. But some of these community things are not really being supported as they should be. So we weren't really going out to the community and giving presentations. And there's a lot of things just at the lowest level, if the community knows about, can be safer and more securely connected. So collectively, I sat down, actually had some help with actually a lot of people. I was the lead, but we had some companies that had some people that helped us out. DHS, Secret Service, Attorney General's Office, ISC Squared, Hawaii Chapter. And the list kind of goes on. Nice. That was there at various locations. It was all volunteer driven. Okay. Which is so easy, right? It's like herding cans. Like how do you get all these volunteers? Pushing the noodle, right? Kind of thing. And it did funny how everybody signs up early, but then they all get these other commitments and you got to shuffle around. So, you know, what we did this year, which I was very impressed with our community is, so we use ISC Squared. They have built a speaker's bureau. So 58 people signed up to be on the bureau that can be asked to present. And of the, all the libraries here on Oahu, which I think were 13 initially, we had two people assigned to each and every one. Just in case something happened. Sure. And in many cases, both of the speakers showed up and gave presentations, as you know. Yeah, yeah. Yeah, I heard it went really well. And we, the thing, the one that we kicked off, I think, was at the mall. And you know, you had a cipher game there, which kind of surprised. I didn't know, did you dream that up? Or that was a fun addition. People sat down and played, tried to cipher these puzzles. So, a decipher, I guess I ought to say. So, you know, there's a thing called capture the flag. And that's really for, generally, there's professionals that kind of do that. There were students that have studied these things. And, you know, I wanted to have an awareness with our mall goers, as to what are some of the things that cyber security people do. And one of them, of course, is encrypting decrypting. And so I just made things up and put it together and kind of saw how it was going to go. So that was actually beta version. A lot of people got stomped. I think not many made it through 80% of it, but we did have one person. Yeah. That got all of it correct. Yeah. We'll have a picture of her later. I hope she ends up getting a cyber security job somewhere. She was all excited. So, yeah, we are kind of, I am talking to her. My wife and I. Really? Oh, excellent. You know, my wife was out there also too. Sure. So, yeah. Yeah. Your wife was doing a lot of recruiting. Like she was pulling people in, saying, you know, challenging to take our cyber. And first they're like, what is it, you know? Yeah. She was actually, she did a great job. She did a great job. Actually, not just at Pearl Ridge where we started, but also the, I mean, she's my partner, right? So, awesome. She helped out at Woodward Mall as well as Kahala Mall. Nice. So, National Cyber Security Awareness Month is a federal effort, right? It's from, it was a Stay Safe Online participates. There's some federal funding behind the rollout of the program. And it's every October for what, the last four years now? Three or four years? No, I want to say it's at home. Is it older than that? At least 10, if not 13. Oh, I didn't know. I would even know where it was. I'm trying to remember. I did read that. Okay, wow. I think it's 13 years old. Wow, okay. So, Hawaii jumped in for the last two. Yeah. So, I've been in this position for doing this specific for the last year plus. Okay. So, I'm not quite sure what we did prior. I don't remember anything. But, you know, I mean, and last year we did not even a crawl. I came in so late in the game, but we wanted to do at least a crawl this year, right? Sure. So, this year, a lot of challenges, a lot of different things that could have been done better. But, you know, that's what next year is for with the walk and then the run. Sure. So, I hope to engage with even more as well as other organizations coming online. So, a lot of it was actually support from ISC squared. Yeah, okay, great. Because that's kind of the main nonprofit I'm aligned with, with the CISSP certification. But, you know, we had elements of others out there, but, you know, we'll have more time next year. Yeah, that's good. And I think, you know, having helped out a little bit last year and this year, there seemed to be a lot more preparation this year that we were able to, because, you know, you had more time to get everything rolled out. We definitely had a lot more help. It seemed like the materials had improved dramatically to really address some of the problems. And there were takeaways for everybody. So, I think that as a community, you know, and we found people are concerned and confused, and they don't know what to, and they're being victimized. We heard a lot of stories, you know. So, yeah, it's, you know, for me, though I was talking to people, what I look at it kind of is, what keeps me going on this is, every time you talk to someone, you can kind of think about the fact that you're probably saving the community somewhere $100 if you use that number. I think so. So, I went to, very interesting, I went to Windward Mall, and they, our seniors were exercising at Windward Mall, eight o'clock in the morning, every morning. Okay. And I went to the leader who happened to be a retiree from the National Guard. So, we connected. And when he was in the Guard, he worked in the same building I work now, even though I'm a civilian now. And I asked him if he could promote this for me to have a presentation there. And 52 people showed up. I presented to 52 of our seniors right after their exercise session. Wow. So, they were awake, and I let them ready to go. They were awake, they were ready to go. Chopping at the bit. Not only that, but you know the presentation takes about 45 minutes, maybe plus or minus. I was there for three hours. Wow. And left until the last person had her question answered. Wow. And to me, that was, I mean, I felt so good after that presentation. I think I saved $100 times 52 that day. Sure. Because you hear all those stories. I mean, it's, and they don't know collectively the community, because this is a new era for many of us, what people are doing, malicious actors, to get your money, your information, and everything else, your medical records. And I think that that's why that awareness, that peace, I think that should be made big. You know, because people hear, ooh, cyber, ooh, presentation, and they're scared, or they don't know what's going to happen. And when you say awareness, and I think it really brings it down to this level, listen, we all have things to learn, regardless of what we do in our day-to-day, in our practices, and whatever, there are things that, and we can learn from each other. Yeah. And we found that out, right, in some of the classes. It was truly, it became more interactive as people wanted to share. And I was personally kind of surprised at the amount of scams that people have fallen for. So, this awareness is very necessary. Yeah, it's, I mean, you and Vince Lee did a great job at IAEA. I mean, kudos. I think you guys were, I won't say you were the best, but you were one of the best. They'd be the best, but they were others. Yeah, yeah, yeah. We're very good. Very engaging. I was, I mean, we had about 25 individuals in there, and I think the questions went for at least an hour, if not more. I mean, just, We stayed a while, didn't we? Yeah. It kept on going, which was great, because, you know, the value of these presentations that we've given at the library's issue in other places is really the questions. It's not what we provide. It's really, hey, I got a question or something happened, and everyone learns from that, and that was really amazing that I saw at really all the libraries that we went to. Yeah, I was thinking what, when I was given that, they'd have been cool if we could have had like some of this, some of video gear there, we could have been kind of recording the questions or people's histories. Like, because these, these stories that they tell, you see one person telling a story, and you see the other heads going, oh, yeah, I did that, or yeah, that happened to me. And so that, if we could sort of get these themes, you know, I know the FBI sort of compiles this information and sort of knows what scams are hot in what areas and who's running them. But, you know, it, there's some valuable data there in what's just coming back from the audience, not just what we're putting out up from the front of the room. Yeah, so, you know, it's, one of my thoughts is collectively to work with all here. And again, I'm probably the new guy in town. So, the Attorney General has been doing these type of presentations, not specifically, I mean, they do a lot of things like cyber bullying and financial scams along with DCCA, the FBI. So, collectively, I'm trying to figure out how to come with like a one-stop shop. And it might exist, I just haven't figured that out yet. So, I'm trying to get with DCCA, I've talked to Attorney General and the FBI and so forth. So, I think people are not sure where to call not to report something because that's easy, that's HPD and possibly the FBI, depending on the situation. But that's easy, but if you don't want to report and you just want to get information, where do you call kind of thing, right? So, the FBI, that's not the FBI's mission. We know that. It's not the Air Forces or the military's mission. So, anyway, that's kind of the next phase that I hope to have figured out by next year. So, like a community clearinghouse or a way for community members to perhaps get some assistance or get some FAQs? So, ISC Squared is looking at standing up a, specifically for this last month, they were very successful to stand up a speakers bureau, right? So, if I'm in a club, an organization, and we need speakers, where do we go? So, generally, they come to me, but there's just one round old, right? So, we're trying to formalize that. So, it's a web base, sign up, I got 20 people, I got a venue, and it's all good, and we want a speaker. We have, who are we? We're seniors, or we're a high school, whatever it is, and we then go to the speakers bureau, hopefully, and push that in there. So, that's kind of one service that I'm looking at trying to do, and all can participate. So, if you're a federal, state, military, so forth. But the other part is, I think is, I have a question. So, when I went out, I told everyone, if you have a question, send it to my website, and I do engage with the community, so we can answer these questions, and eventually, we'll have a pool of answers. Yeah, that's what I was looking for. Versus, I know, hand crafting every answer, and this pool of answers will get better and better and better with time, with all the references, and so forth, and direct kind of locations, because a lot of that takes time. I got a question about cyber-patriot. My son is in high school. What schools have, well, we answered that question last week, and here it is. So, that's kind of the next thing, that kind of the question help to cyber safety and cyber security. And kind of crafting these responses, and the interesting thing is that the response will change. As the attack vectors change, as the type of attack change we've seen, that's one interesting thing about it. You really can get your cyber maturity ready, or some cyber hygiene, I like to call it, in your interactions with your social media, or your computer, whatever it may be, but you have to, it doesn't just suck. It's not static, where you can just get a program, and you're happy. You've got to stay with it, and keep learning. So, the second half of that is key is sustainability, right? So, that's where it's, people like me, are somewhat relocked in. Yeah, because we want to hand it all to you, and you just keep doing it forever. So, I'm more than happy to be the adult supervision to all of this. Nice. But if I have the community, and ISC Square has done very well, that's why I'm talking about this, but the next phase is a little more, right? We don't want to have stale information out there. If we're going to take the effort to give it back to the community, it's got to be fresh. Yeah. Yeah, and I think we did some, we've got InfraGuard and we've got FBI. I think because our community is so small, we all kind of know each other and work together. And so, there's that outreach from those folks that people aren't aware of. You know, there's definitely conduits for this information to get to the community, and it's stripped down, it's not classified anymore. It's the kind of stuff that you need to know as a consumer. Let's just call it that, you know, the public. So, my thought to all of this is, I mean, however it's done, but I'm available as the coordinator to do this. I mean, a lot of people out there, it's not really their day-to-day job. Yeah. You have a day-to-day job. Sure. And it has nothing to do with briefing the community at IAEA. But hey, great, excellent. That's kind of my job. Sure. Okay. But if I brief IAEA, I can't be... Yeah, you can't, you can't. There's not one of you. I'm trying to bring this all together to work this, really, this issue. Yeah, and this issue is a community problem. Hey, we're talking about the conclusion of National Cybersecurity Awareness Month and Hawaii's program and what got done. We're going to pay some bills, and we'll be back in about 60 seconds. Thank you. Hello. My name is Stephanie Mock, and I'm one of three hosts of Think Tech Hawaii's Hawaii Food and Farmer series. Our other hosts are Matt Johnson and Pamai Weigert. And we talk to those who are in the fields and behind the scenes of our local food system. We talk to farmers, chefs, restaurateurs, and more to learn more about what goes into sustainable agriculture here in Hawaii. We are on at Thursdays at 4 p.m., and we hope we'll see you next time. Hello, everyone. Think Tech Hawaii is broadcasting in Japanese. Hello, I'm Yukari Kunisue, and I'm the host of the Japanese broadcast in Hawaii. I'm broadcasting from 2 p.m. every Monday. I'm broadcasting from the Japanese community, the Hawaii's Japanese community, and I'm broadcasting from a program where I can share useful information, news, and guests. Hello, I'm from 2 p.m. every Monday. Please take a look. I'm Yukari Kunisue, a host. Aloha. Hey, Aloha, and welcome back to Security Matters Hawaii. We're talking about National Cyber Security Awareness Month, and we're just kind of giving a wrap-up of all the things that got done. We had a lot of outreach ran under Reignold Hillke's office out of the state of Hawaii as the cybersecurity coordinator. You're a one-man show over there, I think, but you did enlist some community help, and we really did a lot of sharing. And we want to walk you through a little bit of what got done, and maybe we'll have some anecdotes from some of those presentations. What do you think? Sounds good. Let's go. All right, let's roll it. Let's see what we got. So I've got a producer in there who will roll out for us. This looks familiar. That's, I think... So that's at Pearl Ridge. Pearl Ridge. That was our first event. It was actually not in Cyber Security Awareness Month. It just happened a couple of weeks before, but good enough. And this was one of our contestants. So this was the screen. You see how they're decoding that? There's some text there that they're trying to decode. So this was one of that ciphering test we had. So some people would look at the chair and look at the screen and then look at the chair. They weren't sure if they wanted to get in. But we tempted them with... I think a ward was a Snickers bar or something. So... Yeah, I think everyone that played got a candy bar. Yeah, yeah. They're shopping, they need a little energy. So that worked out pretty well. It was worth the pain that they had to go through. All right, what do we got next? Oh, this was an amazing thing. After watching many, many people struggle with the cipher exam, most of them got one or two right out of... I think there were five or six. There were five questions. Five. This was Candice? Yeah, it was Candice. And what do you think? Yeah, she got them all right. She was the only person... I was stunned. Actually, throughout the whole campaign, we had three shopping centers. In the whole month? It was the only one that got them all right. Now, don't leave it around. It warped a little bit as we went by. Sure. But it got simpler. Yeah, this was hard. This thing was hard. Yeah, with the little challenges, we can't really take pictures of people unless we get them to sign and all of that. And then use it, right? And use it. So, you see the back of people's heads all the time in these pictures. That's good. That means that the classes were full. I remember last year I did one in Honoka, which I think we caught them off guard. The only people there were the librarians, you know? So, hopefully they came in here. But they learned, you know? I'm sorry. You know what the heck? It was fun. What else? What was next? Where else did we go? I think we ended up hitting most of the malls, right? This is another library. So, this is actually Nanakuli. Nanakuli Library is actually the newest library that the state of Hawaii has. It just opened this year. And that looks like our buddy Jasper. And Jasper Green and Tanya Fitzgerald were the two presenters. This was actually our inaugural presentation. It was the first week of October. Okay. And they did a great job. So, I've never talked to them about this, but it was like watching a play. They were that good? They were that good? Did they rehearse or did they just meet up and do it? They just met up. That's awesome. In fact, Tanya got stuck in traffic and so she showed up right before it started. Well, Jasper probably would have been ready to roll anyway. He's always fun. Yeah. And the audience was highly, they were very engaged. I mean, you can tell the audiences engaged by the questions they asked during the presentation and after. If they stay later. And that was actually, they kicked us out of the library. That's why we couldn't take a picture in the room because they wanted to close it. Wow. And so, that worked really well. Okay. Good. So, that was a couple of libraries. We've seen what it, where else were we? Oh, now the governor is, it's up to him to kick this off, I guess. Yeah. So, this is, of course, Governor Ege. And this year, National Cyber Security Awareness Month was kind of held by ETS. They were the lead. I was the lead last year. So, ETS was the lead this year. And that's our Enterprise Technology Services. Yeah. Enterprise, which is the state of Hawaii's IT shop, you see, with the chief information officer, Todd Nakapu, he's doing just an outstanding job out there. And Todd's in there. I see Vince, or Vince, I see Jody Ito back there, Arnold. Yeah. And, but there is a, the person that's receiving the proclamation is, is a good friend of mine, Vince Hong, who is the state chief information security officer. And he is just also doing a bang-up job. I mean, we're, we've gone from kind of completely unsecured to very secure now. And they're, they're actually winning awards at the national level. Yeah. He's doing, he's doing, the whole team is really doing a great job. You know, you're, I think a lot of people don't know. Yeah. I mean, you know, they're doing a good job when they're just too busy to do anything. I mean, they are busy. And he's actually brought in his team to include Mark Masuno, who's a good friend of mine from the, we have ties from the Air National Guard. Okay. So, he's, they're just doing a good job. I'm very, I'm very happy because, again, they went from zero to 60, just kind of, Yeah. Bringing the right people, good things happen. Right people and the right skills. Where else did we go? This is, So, what is this? This is, this is, this is Windward Mall. Okay. Windward Mall. Right on. I did not get out there. So, What's the wheel? You had a different game. I'm not sure if we, I don't think we had the wheel at the time. So, so how do you bring the, how do you bring the mall goers to you? Right? I mean, they're busy. Giveaways. They're busy. So, you bring the wheel. So, this is the, Wheel of Fortune. This is my wife's great idea. Okay. And I tell you, people were just coming in to spin the wheel. Really? Awesome. So, we'll use that next year then. So, we had gift cards. We had, which was a top prize every hour, a gift card. Wow. Okay. And then, you had candy bars, lanyards, pencils, and every, wristbands and things like that. So, yeah, we, we, we estimate on this one, we had probably around 200 plus people that came up. And on going, did you get players like pretty consistently at all the malls? Because that's a funny thing. You got shopping. So, this was actually interesting. We didn't have many that played the game as much, but we had a lot of people came. It was based on the, how the, the, the setup was. I see. So, we learned about the setup kind of thing. And it's really based on where you're set up. This was actually kind of, no, I won't say a side alley. Oh, okay. But it wasn't quite, it was, they saw the front, but they didn't see the side. So, the traffic went left to right versus around this kind of thing. But nonetheless, we had 200 plus. Good. Good deal. What's next? Ah, this was a little presentation. Yeah. That's our friend, Will Bales. So, this is kind of a little add-on, a little special bonus for National Cyber Security Awareness Month. It turns out, I think you found this to eight, I mean, sorry. The FBI has a really good presence here in the state. Yes, huge. I mean, probably better than most states. And Will Bales is the, the supervisor's special agent in charge of the cyber squad. Yeah, cyber crime. And, you know, when I first met Will about eight months ago, it was very strange. I keep bumping in him, into him. Before him was Ed Arias. Yeah. If you know Ed. Oh, yeah. Oh, who's a good friend of mine. And Will kind of said, hey, are you stalking me? But we kind of just go to the same meetings. Sure. But his dry humor, he's just hilarious. Yeah. And he gets the message across. Yeah, he does a really good job. We had him in to talk about the new Protected Voices program a month or two ago. Yes, yes. He's been on the show. We saw that come by. Really good guy. Yeah. And we do appreciate the help from our federal friends out there. They bring a wealth of information that we need. Yes, they are key to a lot of the things, especially the bigger number of value, more national kind of thing, right? Yeah. And, you know, business here just needs that level of awareness. The counterintel guys have been good about talking about the internal thread and this infiltration and the people trying to get hired to steal your intellectual property and all that stuff. So there's a lot of really good stuff happening. He's got really good information. What we got next year, we'll talk to us at ISC Squared. Yeah, he's definitely been doing a lot of, oh, there he is again. Did he get an award? Yeah. Did we give him a plaque or something? We gave him a plaque. He doesn't have his plaque. So ISC Squared generally at the end, I'm one of the advisors, but there's officers there basically. And that's just a picture at the end of the event. Okay. Just to put in our scrapbook. Yeah. And that's at the Navy League's office. We'll give them a shout out for supporting ISC Squared over there. Jane Furrer out there at Navy League does just an outstanding job, not just for the Navy League, but for the community. Yeah. She is, she is all over. What do you got next? Wow. Where's this? So this is Kahamal. Oh, yeah, this is probably the most successful, not that the other places are not good places to go to, but we were placed right there, right smack in the middle where Macy's is. Okay, good. Longsdrugs, Macy's and a lot of people from the back, the front, the side were coming to us. We think we had about 300 people that came by. Nice. We ran out of stuff. Really? Wow. So that's good to know. And then you can see the game on the right hand side there. That game is actually a different game. We, I morphed it into a quiz. Okay. So we, you could keep, it was just the next generation, similar questions, but we had other questions that were just a little different. And did, did the, was it like always on Saturday? Was it Saturday, Sunday, the month? I don't recall. I don't know how we held Saturday on, at the Purr Ridge. Yeah, Purr Ridge was Saturday. Then we went to, Windward Mall was a Saturday. So they were all one day when you're at a mall. But Kahamal was a Sunday. Okay. They couldn't get a comment because they had this huge, and you know, we couldn't do it at different, I didn't want to have different, two different things happening at the same day. We kind of had to stack it one after another. Awesome. But it worked out good. It was actually a Sunday and we had almost 300. I couldn't imagine what it was on Saturday. Nice. Well, we've got about a minute left. We've kind of walked through what happened. You got any final words of wisdom for the community out there? What, what they can, what they can expect to see out of the office coming up? You know, what was kind of apparent to me as we went through all of this is a couple of things that are what I call foot stompers, that if you know this, you know more and a lot more. I mean, so these are really valuable things. The first one is hovering your, your mouse cursor over a link, right? Always hover to see if it's the actual thing. See what the actual link, because the link that you see is actually just a label as, and what's hidden behind. And many people, I think, got it when you gave the presentation, but you just never know, right? Because you get these kind of blanks there. So that's the first thing. The second thing is password managers. What exactly is a password manager? It's in the presentation, you talk about it, but until they go out and kind of look at it, it might be very, very difficult to understand. And one lady said, okay, so I'm going to take a picture of my passwords in my notebook, and I'm taking that picture and putting it in a vault. I said, no, that's not what we're doing. So those types of things, what we're thinking about doing now is building videos. So if we go out next time, and we're probably not, by no means are we stopping the presentations. We actually have one scheduled in two weeks at Midpack Country Club. As the community asks for these things, but to have videos that go along with it. So you stop the presentation, you show the video, then this is what I'm talking about when the link. Because that presentation with the link is, there's a little to be desired. So I mean, you can't really tell, kind of thing. Yeah, I've seen people puzzle over that myself. That's kind of the thing we want to do is go to the next level and maybe add to that presentation. Not necessarily have a new presentation at this point, because that will take a lot of effort. But those type of things that if I see it in a video, it'll make much more sense. Like I told people, I have like 84 passwords accounts. And you probably have more. But every time you do something, you need an account. And I basically, my passwords in general, 30 characters along with upper lower special number, and they're all randomized because I just cut in pace. And that concept doesn't quite come across sometimes. But I think if people saw it, they would go, got it. Okay. So we're out of time today. Reynold, thank you so much. Appreciate you coming in. Oh, then my pleasure. Thank you so much for driving the program out into the community and joining us again next week for another episode of Security Matters. Aloha.