Which layer is described as 'The human being using the computer and network'?

• A. 9 - Policies
• B. 3 - Network
• C. 7 - Application
• D. 8 - User

Answer: (D)

The human using the system is the user layer. In layered security concepts, people, processes, and technology are treated as distinct layers, and the user layer specifically represents the person who interacts with the computer and network. This recognizes that human behavior—such as password practices, susceptibility to phishing, and how they handle data—has a direct impact on security. Training and awareness act as defenses at this layer because empowering users to act securely reduces risk.

The other layers correspond to things like rules and procedures (policies), the software that runs on the system (applications), and how data moves over networks (network). They describe different parts of the system, but the human operator is best captured by the user layer.