(5S Step 5 — Aufpassen) What does the fifth step, "pay attention," actually ask of a user?

Question

Accepted Answer

Take personal responsibility and apply common sense online — the human behaviour that no tool can replace.
The fifth step is the deliberately non-technical one: the user themselves as "a central security element." It means:

exercising personal responsibility (Eigenverantwortung)
using common sense ("gesunder Menschenverstand")
becoming familiar with the internet and its terminology so you can recognise trouble

Why it's listed last but matters most: the first four steps are things you set up once (backup, AV, firewall, updates). The fifth is a continuous judgement call — every email, link, call, and download. It's exactly where awareness training pays off, because it's the step attackers target with phishing and social engineering.
Tip: Tools handle the known threats; attention handles the novel, human-targeted ones. The 5S model is four tools plus one mindset.