What is Information Security Culture

National culture has been proven to have an adverse impact on the quality of information security in a country. It influences the perceived norms, behaviours, and attitudes associated with cybersecurity like setting strong password adherence to privacy policies, training, and educational programs. To thaw the existing information security culture, its shortcomings must be identified and communicated, after which new cultural beliefs can be instilled through change management. This chapter aims to examine the effects of Botswana's cultural values on information security culture. Botswana is chosen as it is one of the fast-developing countries.