The University of Texas System chancellor's security initiative required the 15 academic and health institutions to evaluate IT security, both centrally and in all departments. A security group was charged with reviewing these assessments to identify systemic barriers to IT security. The systemic barriers and mitigation strategies will be discussed.