Computer and network security has become more and more a part of academic libraries list of concerns. Libraries collect information about their patrons that must be protected and kept confidential. They also utilize many different types of networked applications for the creation, storage, retrieval, and dissemination of information. There have also been an increase in the number and the variety of attacks and reasons why an individual would attempt to break into a computer network. Access to the machines to turn them into drones for other attacks is also a malicious goal of some attacks, ignoring what data is available on the machine. Academic libraries must have a security strategy for prevention and that strategy must include cooperation with other entities, solid risk assessment, efficient technological solutions, strong policy, and education of their staff and faculty. The authors’ focus in this article is on implementing these for you staff computing, not in public computing areas such as computer labs or research stations; however, much of what is presented is applicable to the public arena.