The problems of Information Security Culture promotion are more and more recognized by researchers working in the field of Information Security. ISC can be considered as an essential component of Information Security Management systems today. The prerequisites to development of Information Security Culture are investigated in this paper. The main factors that affect Information Security Culture are discussed, namely attitude to IS requirements, standards of behavior and normative beliefs. An approach to complex qualitative evaluation of ISC using convolution matrices is proposed. Keywords: information security culture, information security requirements, evaluation, convolution matrix.
