Never had to look at swapping an ECM, not sure if they are security coded or vin locked or both?

All I can find on TIS is


Prepare control unit for removal (new SPS-function):
- This function is only required before removing an ECU from a
vehicle.
- Not all control units need to be prepared before removal.
- In TIS2Web, select "SPS" application and select "reprogram ECU".
After entering vehicle data and VIN, select the prepare control
unit for removal and follow the screen prompts.

Programming:
- Most new control units require programming. This function is also
used for reprogramming.
- In TIS2Web, select "SPS" application and select "reprogram ECU".
After entering vehicle data and VIN, select the appropriate
programming function and follow the screen prompts.

Configuration and Setup (New SPS-function):
- Some control units require a configuration and setup after
programming.
- In TIS2Web, select "SPS" application and select "reprogram ECU".
After entering vehicle data and VIN, select the appropriate
configuration and setup function and follow the screen prompts.

Immobilizer Learn (New SPS-function):
- The BCM and the ECM require an immobilizer learn after the
"configuration and setup" -function.
- In TIS2Web, select "SPS" application and select "reprogram ECU".
After entering vehicle data and VIN, select the "immobilizer learn
function" and follow the screen prompts.