This paper attempts to investigate the impacts of main factors influencing information security behavior in improving awareness and performance of ICT departments? staff. According to the extant research, there are four groups of factors influencing information security behavior namely self-efficacy, intention to IT security practice, security practice-care behavior, and security practice-technology. The results of analyzing 220 gathered data from five Iranian universities showed that all factors have significant and positive impact on information security behavior, and the highest impact refers to security practice-care behavior.