That almost got it. I had to change the code to this:

If InStr(UCase(Item.Subject), "SECURE") >0 Then
If MsgBox("Mail will be encrypted. Continue?", vbYesNo) = vbNo Then Cancel = True
End If

Thanks!