ETHICS-IN-TECHNOLOGY Practice Questions

The factory manager's approach is a clear example of consequentialism. This ethical framework asserts that the morality of an action is determined solely by its outcomes or consequences. The manager is explicitly "weighing all possible outcomes"—both positive (enhanced safety, cost savings, profits, lower prices) and negative (job losses)—to select the action that "produces the greatest good." This calculation-based approach, focused on maximizing overall benefit, is the central tenet of consequentialist theories like utilitarianism.

A. Deontology is incorrect because it judges actions based on adherence to rules or duties (e.g., "it is wrong to lie"), regardless of the consequences. The manager is focused on outcomes, not a pre-existing rule.

B. Relativism is incorrect because it bases morality on cultural or individual standards. The manager is not considering cultural norms but is applying a universal principle of maximizing good.

C. Virtue is incorrect because it focuses on the character of the moral agent rather than the consequences of a specific act. The question is about the decision-making process, not the manager's personal virtues.

---

1. Sinnott-Armstrong, W. (2021). "Consequentialism." In E. N. Zalta (Ed.), The Stanford Encyclopedia of Philosophy (Winter 2021 ed.). Metaphysics Research Lab, Stanford University. Section 1, "Plain Consequentialism." Retrieved from https://plato.stanford.edu/archives/win2021/entries/consequentialism/

Reference Point: The entry defines plain consequentialism as the view where "the morally right action is the one with the best overall consequences." This directly aligns with the manager's process of choosing the action that "produces the greatest good."

2. Alexander, L., & Moore, M. (2021). "Deontological Ethics." In E. N. Zalta (Ed.), The Stanford Encyclopedia of Philosophy (Winter 2021 ed.). Metaphysics Research Lab, Stanford University. Introduction. Retrieved from https://plato.stanford.edu/archives/win2021/entries/ethics-deontological/

Reference Point: The introduction contrasts deontology with consequentialism, stating that deontologists "judge the morality of choices by criteria different from the states of affairs those choices bring about." This supports why deontology is an incorrect choice.

3. Stangl, R. (2020). "Virtue Ethics." In E. N. Zalta (Ed.), The Stanford Encyclopedia of Philosophy (Winter 2020 ed.). Metaphysics Research Lab, Stanford University. Section 1, "Preliminaries." Retrieved from https://plato.stanford.edu/archives/win2020/entries/ethics-virtue/

Reference Point: The text explains that virtue ethics is distinct from theories that focus on consequences (consequentialism) or duties (deontology), instead emphasizing the character of the moral agent.

4. Emanuel, E. J., & Wertheimer, A. (2011). Ethical Issues in Clinical Research. MIT OpenCourseWare. Lecture 3: "Ethical Frameworks." Retrieved from https://ocw.mit.edu/courses/24-120-moral-psychology-spring-2021/resources/mit24120s21lec3/

Reference Point: The lecture notes (slides 10-12) define consequentialism as the theory where "the rightness of an act depends only on the value of its consequences," which is precisely the logic used by the factory manager.

The process described is a social audit. A social audit is a formal and systematic review of a company's performance and impact concerning its social and ethical objectives. The scenario outlines the core components of this process: the executive team reviewed progress against existing goals (assessment), planned a new set of goals (action planning), and shared the results with stakeholders like employees and the board (reporting). This cycle of evaluation, goal-setting, and communication is the defining characteristic of a social audit, which aims to ensure accountability and guide future social responsibility efforts.

A. Establish code of ethics: This is the one-time act of creating a foundational document of ethical principles, not the recurring review process described.

B. Model high ethical standards: This refers to the ongoing behavior of leadership, not a specific, formal process of auditing performance and reporting results.

C. Deliver ethics training: This is an educational activity to inform employees, distinct from the high-level management review and strategic planning shown in the scenario.

---

1. Gray, R. (2002). The social accounting project and Accounting Organizations and Society Privileging engagement, imaginings, new accountings and pragmatism over critique? Accounting, Organizations and Society, 27(7), 687-708. This article discusses social auditing as a process for organizations to report on their ethical and social performance to stakeholders (Section 4, "Social Accounting and its 'silent' radical-pragmatic core"). https://doi.org/10.1016/S0361-3682(00)00003-9

2. MIT Sloan School of Management. (2007). 15.992 Global Business, Society, and the Environment, Spring 2007. MIT OpenCourseWare. The course materials, particularly in sessions covering Corporate Social Responsibility (CSR), describe social auditing as the mechanism by which firms assess, verify, and report their performance on social and environmental goals to internal and external stakeholders.

3. Everett, J., & Neu, D. (2000). Ecological Modernization and the Limits of Environmental Accounting? Accounting Forum, 24(1), 5–29. This paper frames social and environmental auditing as a key corporate governance mechanism for assessing performance against non-financial objectives and communicating those results, which aligns with the activities described in the scenario (p. 10-12). https://doi.org/10.1111/1467-6303.00029

The Foreign Intelligence Surveillance Act (FISA) authorizes the government to conduct surveillance for the purpose of collecting foreign intelligence. It is not intended for purely domestic criminal investigations like a typical bank robbery. However, assuming a foreign intelligence nexus exists in this scenario, FISA's provisions for surveillance without a traditional warrant, such as Section 702, are strictly limited. These provisions permit the targeting of non-U.S. persons who are reasonably believed to be located outside the United States. Monitoring calls between two non-U.S. citizens is the only option that aligns with the primary scope of FISA's warrantless authorities, as the other options involve U.S. citizens who have significantly greater constitutional protections requiring judicial oversight.

B. Calls initiated by a U.S. citizen to a non-U.S. citizen: This is incorrect because FISA's warrantless provisions cannot be used to intentionally target a U.S. citizen for surveillance, regardless of who they are communicating with.

C. Calls initiated by a non-U.S. citizen to a U.S. citizen: This is incorrect for the same reason as option B. The involvement of a U.S. person as a party to the communication invokes higher legal protections.

D. Calls between two U.S. citizens: This is incorrect because surveillance targeting communications between two U.S. persons requires a warrant, typically under Title III for criminal cases or from the FISA court for intelligence cases.

---

1. Congressional Research Service (CRS). Reauthorization of Section 702 of the Foreign Intelligence Surveillance Act. CRS Report R47851 (December 11, 2023). On page 1, the report states, "Section 702 permits the government to acquire foreign intelligence information by targeting non-U.S. persons reasonably believed to be located outside the United States." This supports that only non-U.S. persons are valid targets for this type of surveillance.

2. Foreign Intelligence Surveillance Act of 1978, as amended. 50 U.S.C. § 1881a(b). The statute itself specifies the limitations for surveillance under Section 702, stating that it may not be used to intentionally target a United States person or any person known to be within the United States. This statutory language directly invalidates options B, C, and D.

3. Brennan Center for Justice, NYU School of Law. "FISA's Section 702: The Basics." This resource explains, "Under Section 702, the government can only target non-Americans located abroad to collect foreign intelligence." This academic summary confirms that the legal authority for warrantless FISA surveillance is restricted to non-U.S. persons outside the country, making option A the only potentially valid choice under the law.

A white hat hacker, also known as an ethical hacker, is a cybersecurity professional who is legally authorized by an organization to attempt to penetrate its computer systems, networks, and applications. The goal is to identify security vulnerabilities before malicious actors (black hat hackers) can exploit them. The specialist in the scenario is hired by the company to perform exactly this function: test security and find vulnerabilities. This authorized and defensive purpose is the defining characteristic of a white hat hacker.

A. Black hat hacker: Acts maliciously and without authorization to exploit vulnerabilities for personal gain, which is the opposite of being hired to help.

C. Hacktivist: Is motivated by political or social causes to disrupt systems, not by a professional contract to improve a company's security.

D. Industrial spy: Steals proprietary information from a company to benefit a competitor or another entity, not to help the targeted company.

1. University Courseware: In the course materials for "Computer Systems Security," MIT defines the roles of security professionals. White hat hackers are described as those who "use their skills for good" by helping organizations, contrasting with black hat hackers who act maliciously. This aligns with the hired specialist's role.

Source: Saltzer, J. H., & Kaashoek, M. F. (2009). Principles of Computer System Design: An Introduction. Morgan Kaufmann. (Textbook frequently used in courses like MIT's 6.858 Computer Systems Security). Chapter 11, Section 11.1, "Security Goals."

2. Peer-Reviewed Academic Publication: Research on cybersecurity ethics clearly distinguishes hacker types. White hat hackers are defined by their authorization and intent. "The white hat hacker has authorization to perform the security assessment. The main difference between a white hat hacker and a black hat hacker is the motive and the explicit permission from the organization."

Source: Pashel, B. (2006). Teaching students ethical hacking techniques. Journal of Digital Forensics, Security and Law, 1(4), Article 4. Page 4, Paragraph 2. https://doi.org/10.15394/jdfsl.2006.1012

3. Official Vendor/Government Documentation: The National Institute of Standards and Technology (NIST) outlines methodologies for security assessments. These assessments, often called penetration tests, are conducted by authorized personnel to identify system vulnerabilities. This practice is the core function of a white hat hacker.

Source: National Institute of Standards and Technology (NIST). (2008). Special Publication 800-115: Technical Guide to Information Security Testing and Assessment. Section 2.3, "Security Testing," describes the authorized activities performed by security professionals to evaluate system security.

The practice described is consumer profiling. This involves collecting and analyzing data about individuals to create detailed profiles. These profiles, which include demographic, geographic, and behavioral data, are used to understand consumer habits, predict future behavior, and tailor sales and marketing strategies. The organization's goal of using this specific data to optimize sales processes for current and prospective customers is the textbook definition of consumer profiling in a commercial context.

A. Advanced surveillance: This term is too broad and typically implies large-scale, often covert, monitoring for security or intelligence purposes, rather than for commercial sales optimization.

B. Electronic discovery: This is a specific legal process used to identify and produce electronically stored information as evidence in lawsuits or investigations, which is not relevant here.

C. Workplace monitoring: This refers to the monitoring of an organization's own employees' activities, not the tracking of external customers and prospects.

1. Laudon, K. C., & Laudon, J. P. (2020). Management Information Systems: Managing the Digital Firm (16th ed.). Pearson. In Chapter 4, "Ethical and Social Issues in Information Systems," profiling is defined as "the use of computers to combine data from multiple sources and create electronic dossiers of detailed information on individuals" (p. 137), a technique central to modern marketing.

2. Hildebrandt, M. (2008). Defining Profiling: A New Type of Knowledge? In M. Hildebrandt & S. Gutwirth (Eds.), Profiling the European Citizen: Cross-Disciplinary Perspectives (pp. 17-45). Springer. The introduction explains profiling as a method to discover patterns in data sets to categorize individuals for specific purposes, such as identifying potential customers (pp. 18-20).

3. Zuboff, S. (2015). Big other: surveillance capitalism and the prospects of an information civilization. Journal of Information Technology, 30(1), 75-89. https://doi.org/10.1057/jit.2015.5. This article discusses how behavioral data is collected and analyzed to predict and shape consumer behavior, a core component of consumer profiling for commercial gain (Section: "A new logic of accumulation").

A professional code of ethics serves as a foundational framework for individuals within a profession. Its primary functions are to guide behavior and establish a common set of expectations. This leads to consistent decision-making (B) by providing a reliable moral compass for navigating complex ethical dilemmas. By outlining specific duties and standards of conduct, the code also promotes standardized business practices (A) across the profession. This uniformity helps ensure a baseline level of quality and integrity in services, which in turn builds public trust and reinforces the profession's credibility, benefiting the professional, the profession, and society at large.

C. Assured employer integrity: A professional code governs an individual's conduct but cannot guarantee or assure the ethical behavior of an entire organization or employer.

D. Faster career advancement: While unethical behavior can derail a career, adherence to a code is a baseline professional expectation and does not guarantee accelerated advancement.

---

1. ACM Code of Ethics and Professional Conduct (2018). The introduction states, "This Code...is intended to serve as a basis for ethical decision making in the conduct of professional work." This directly supports the outcome of consistent decision-making. The document as a whole, by setting universal principles for all members, inherently promotes standardized practices. (Source: ACM Committee on Professional Ethics, Preamble, https://www.acm.org/code-of-ethics)

2. Harris, C. E., Pritchard, M. S., & Rabins, M. J. (2017). Engineering Ethics: Concepts and Cases (5th ed.). Cengage Learning. In Chapter 2, "Responsibility in Engineering," the authors discuss that professional codes "provide a framework for ethical judgment for a professional" (p. 35). This supports consistent decision-making. They also note that codes are a "commitment to standards" that allow the public to know what to expect from members of the profession, which aligns with standardized practices.

3. Bynum, T. W. (2011). The Role of a Professional Code of Ethics in Information Technology. In T. W. Bynum & S. Rogerson (Eds.), Computer Ethics and Professional Responsibility (pp. 79-86). Wiley-Blackwell. Bynum explains that a key function of a professional code is to "provide a guide to the ethical decisions" its members have to make. He further elaborates that codes help to "specify the standards of the profession," thereby creating uniformity and predictability in professional conduct.

The behavior described is best classified as industrial espionage. This term refers to the illegal or unethical theft of trade secrets and proprietary information from a business competitor for commercial purposes. In this scenario, the sibling illicitly copied the source code—a valuable trade secret and form of intellectual property—from a rival company to overcome a technical challenge and gain a competitive advantage. This action directly aligns with the definition of industrial espionage, which focuses on the acquisition of confidential business information through clandestine means.

A. Nepotism: This is the practice of showing favoritism to relatives, especially by giving them jobs. The scenario involves theft, not preferential treatment in employment.

B. Conflict of interest: This describes a situation where an individual's personal interests could compromise their professional duties. While a potential conflict exists for Employee A, the sibling's act of theft is espionage, not a conflict of interest itself.

D. Corruption: This is a broad term for dishonest conduct, often involving bribery or the abuse of an entrusted position for private gain. Industrial espionage is a more specific and accurate classification for stealing a competitor's trade secrets.

1. Nasheri, H. (2005). Economic Espionage and Industrial Spying. Cambridge University Press. In Chapter 1, "The Nature and Scope of Economic Espionage," industrial espionage is defined as "the unlawful or clandestine targeting or acquisition of sensitive financial, trade or economic policy information; proprietary economic information; or technological information" (p. 8). The theft of source code is a direct example of acquiring proprietary technological information.

2. Davis, M. (2021). "Conflict of Interest". In E. N. Zalta (Ed.), The Stanford Encyclopedia of Philosophy (Winter 2021 ed.). Section 1, "The Definition of 'Conflict of Interest'," defines it as "a set of conditions in which professional judgment concerning a primary interest (such as a patient’s welfare or the validity of research) tends to be unduly influenced by a secondary interest (such as financial gain)." This highlights that it is a situation, not the specific act of theft.

3. Bellow, A. (2003). In Praise of Nepotism: A Natural History. Doubleday. Chapter 1, "Defining Nepotism," establishes the term as favoritism granted to relatives in various fields, particularly regarding appointments or employment, which is not the subject of the scenario.

4. Heidenheimer, A. J., & Johnston, M. (Eds.). (2002). Political Corruption: Concepts and Contexts. Transaction Publishers. In the introduction (p. 6), corruption is broadly defined in a public context as behavior that "deviates from the formal duties of a public role because of private-regarding (personal, close family, private clique) pecuniary or status gains." While the concept can be applied to the private sector, it is less precise for this scenario than industrial espionage.

The scenario describes hiring external personnel for a project with a specific, fixed duration of six months, governed by a legal document. This arrangement is the definition of an independent contractor relationship. Independent contractors are non-employees engaged to perform specific work under a contract that outlines the scope, deliverables, and timeframe. They are not integrated into the organization's permanent workforce, which aligns with the "external" and "six-month" criteria provided in the question.

A. Full-time employees: This is incorrect because full-time employment implies an ongoing, indefinite relationship, not a temporary, six-month project-based engagement.

B. In-house expertise: This is incorrect as the organization is explicitly hiring "external" engineers, whereas in-house expertise refers to utilizing existing, internal employees.

C. Part-time salaried workers: This is incorrect because, like full-time employees, part-time workers have a continuous employment relationship, not a fixed-term contract for a specific project.

1. Cornell Law School, Legal Information Institute (LII). In its definition of "independent contractor," the LII clarifies that such individuals contract to perform work for another party but are not subject to the other's control over the manner and means of performance. This aligns with hiring external experts for a specific software development project. (Refer to the "Independent Contractor" entry in the Wex Legal Dictionary/Encyclopedia).

2. MIT Sloan School of Management. Course materials on strategic human resource management distinguish between core employees and contingent workers (including independent contractors). Contingent workers are utilized for their specialized skills on a temporary or project basis to provide organizational flexibility, which directly matches the scenario. (See materials from courses like 15.665 Power and Negotiation or similar HR management syllabi that discuss workforce structure).

3. Gregory, D. L. (1999). Employee or Independent Contractor: A Guide to the Legal Labyrinth. William & Mary Law Review, 41(3), Article 2. This academic article details the legal tests used to differentiate employees from independent contractors. A key factor discussed is the "length of time for which the person is employed" (p. 965), noting that a defined, short-term project duration is a strong indicator of an independent contractor status.

The core issue is that records are "missing," which indicates a failure in the process of gathering and entering data into the system. Data collection is the aspect of data management concerned with the systematic capture of information. The manual entry process is proving unreliable, leading to incomplete data. To prevent this, the store must improve its data collection procedures, for example, by implementing automated data capture (e.g., barcode scanning) or a more rigorous, validated manual entry protocol to ensure every transaction is recorded.

A. Encryption: This is a security measure to protect data from unauthorized access; it does not ensure that the data is captured in the first place.

C. Availability: This principle ensures that data is accessible to authorized users when needed. The problem is not access to existing data, but the absence of data.

D. Accuracy: This refers to the correctness of the data that has been entered. While important, the primary problem here is missing records (incompleteness), not incorrect records.

1. MIT Libraries, Data Management, "Data Lifecycle": The data lifecycle model outlines the stages data goes through. The initial stage is "Create or Collect," which involves gathering data. The problem described in the scenario is a failure at this fundamental stage. (Reference: MIT Libraries, Data Management and Publishing, "Data Lifecycle," Section: Create or Collect. https://libraries.mit.edu/data-management/plan/lifecycle/)

2. DAMA International, The DAMA Guide to the Data Management Body of Knowledge (DAMA-DMBOK2): This foundational text defines the different knowledge areas of data management. Data Quality Management includes the dimension of "Completeness," which is the degree to which all required data is known. The failure described is a lack of completeness caused by a breakdown in the data collection process. (Reference: DAMA-DMBOK2, Chapter 3: Data Governance, and Chapter 10: Data Quality).

3. Stanford University, "Data Management Best Practices": Stanford's data management guidelines emphasize the importance of establishing clear procedures for data collection to ensure consistency and completeness. The scenario highlights a lack of such robust procedures. (Reference: Stanford Libraries, "Data Collection and Creation," https://library.stanford.edu/research/data-management-services/data-best-practices/data-collection-and-creation).

Corporate Social Responsibility (CSR) is a business model by which companies make a concerted effort to operate in ways that enhance society and the environment. This includes ethical responsibilities, which involve going beyond legal requirements to do what is right, just, and fair. Providing parental leave benefits that exceed legal mandates is a direct example of a company fulfilling its ethical and social responsibilities to its employees, a key stakeholder group. This action demonstrates a commitment to employee well-being and work-life balance, which are central tenets of the social dimension of CSR.

A. Ethics code: An ethics code is a formal document outlining principles and guidelines for conduct. The action of providing benefits is an application of such principles, not the code itself.

C. Supply chain sustainability: This concept focuses on the environmental and social impacts of a company's supply chain, from sourcing materials to product delivery, not internal employee benefits.

D. Integrity: While the organization is acting with integrity (adherence to moral principles), CSR is the specific business framework that encompasses such voluntary, socially beneficial actions toward stakeholders.

1. Carroll, A. B. (1991). The pyramid of corporate social responsibility: Toward the moral management of organizational stakeholders. Business Horizons, 34(4), 39-48. In this foundational model, "Ethical Responsibilities" (p. 41) are defined as activities and practices expected by society but not codified into law, which includes providing a higher level of benefits than legally required.

2. MIT Sloan School of Management. (2017). Corporate Social Responsibility (CSR). MIT OpenCourseWare, 15.S21. This courseware defines CSR as actions that appear to further some social good, beyond the interests of the firm and that which is required by law. Providing enhanced employee benefits fits this definition.

3. McWilliams, A., & Siegel, D. (2001). Corporate social responsibility: A theory of the firm perspective. Academy of Management Review, 26(1), 117-127. This article defines CSR as "actions that appear to further some social good, beyond the interests of the firm and that which is required by law" (p. 117), directly aligning with the scenario. https://doi.org/10.5465/amr.2001.4011987