The University of Wisconsin-Madison is implementing a prototype Information Technology Security Program focusing initially on governance, procedures, and training. Illinois State University is in the midst of implementing a campus-wide security plan and has learned much from these experiences. Although these programs focus on different aspects of security management, they greatly complement each other.