An increasing number of security breaches in organizations present a potentially serious threat to individual privacy and the security of corporate data. Many security breaches happen due to so-called “human error”. Recent research shows that information security culture encourages security-vigilant behaviour of employees and therefore can help to avoid human-related security breaches. The concept of information security culture is relatively new and research on the subject is still in its infancy. In particular, the impact of national culture on information security culture has received very little attention in the literature. Our research-in-progress aims to address this gap.