2-1
Ethics in Information Technology, Sixth Edition
Ethics in Information Technology, Sixth Edition
Chapter 2
Ethics for IT Workers and IT Users
Self-Assessment Questions
1. True
2. c. stop the unauthorized copying of software produced by its members
3. Whistle-blowing
4. b. Material breach of contract
Discussion Questions
1. What characteristics would you say are true earmarks of an employee who is unprofessional
in his or her approach to work?
Students’ answers will vary depending on their values and on their work and life experiences.
2. How do you distinguish between breach of contract and material breach of contract? Provide
an example of a breach of contract that would not be a material breach of contract.
2-2
Ethics in Information Technology, Sixth Edition
A breach of contract occurs when one party fails to meet the terms of a contract. A material breach
of contract occurs when a party fails to perform certain express or implied obligations, which
3. When companies are filling open positions in U.S.-based IT organization, do you think that
preference should be shown for qualified candidates from the United States over qualified
candidates from foreign countries? Why or why not?
Students’ answers will vary. Some of them could say that they would prefer qualified candidates
from the United States fill the open positions in a U.S.-based IT organization. They might reason
4. Does your employer or school have an acceptable use policy in place? Are you familiar with
it? Were you asked to sign it?
5. Review the Software Engineering Code of Ethics and Professional Practice presented in
Figure 2-3. Identify and briefly describe a ninth principle that you feel should be added to this
code.
Students’ answers will vary depending on their values and work experiences. Some students might
original eight principles.
2-3
Ethics in Information Technology, Sixth Edition
6. Describe a situation in which there could be a conflict of interest between an IT consultant’s
self-interest and the interests of a client. How should this potential conflict be addressed?
Students’ answers will vary. One example of such a situation might be related to project delays. An
IT worker or the project manager might be reluctant to share status information with the client that
7. Should software developers who work on critical applications whose failure could result in
loss of human life (for example, software for self-driving cars) be required to be licensed?
Why or why not?
Students’ answers will vary. Some might say that requiring a license for such individuals would
help ensure that the professionals working on safety-critical software have achieved a certain level
8. Review the acceptable use policy prepared by the SANS Institute (https://www.sans.org
/security-resources/policies/general/pdf/acceptable-use-policy). Is this code clear and concise?
Does it provide a strong justification for following the AUP? Does it specify sanctions that will
be enacted for violation of the AUP? What necessary changes do you feel should be made?
Students’ answers will vary. Students can use the manager’s checklist in Table 2-5 to help them
9. What do you think are the benefits you can derive from joining a professional organization
for people in your chosen career field? If you were to join one professional organization,
which one would it be?
2-4
Ethics in Information Technology, Sixth Edition
Students’ answers will vary, in part, depending on their chosen career field. Students might identify
field.
10. The Foreign Corrupt Practices Act (FCPA) allows a bribe to be made under what conditions?
Explain, and provide an example.
The Foreign Corrupt Practices Act (FCPA) makes it a crime to bribe a foreign official, a foreign
11. What certifications are available for someone in your chosen career field? Which of these are
considered most valuable?
12. What is the difference between a breach of duty of care and professional malpractice?
Duty of care refers to the obligation, as determined by a regulation, law, or court decision, to
protect people against any unreasonable harm or risk. A breach of the duty of care is the failure to
What Would You Do?
1. Students’ answers will vary. Students should be aware that CPAs are licensed by the state in which
they practice, and such licenses typically include a requirement to follow all laws and applicable
2. Students’ answers will vary. Concerns about résumé inflation and whether the certifications are
2-5
Ethics in Information Technology, Sixth Edition
In this situation, students could consider asking their boss if they might include two or
3. Students’ answers will vary. They might note that the ethical thing to do would be to record the
4. Students’ answers will vary. Some of them might say that they would be inclined to testify in
support of their coworker who was being harassed. This would be the ethical thing to do,
5. Students’ answers will vary. Students might feel it is their obligation to let their friend know that
his résumé seems inflated. Students might also bring up the responsibility they have to their
6. Students’ answers will vary. Most students will consider this as an attempt at a bribe. Students
might suggest expressing their appreciation to the contractor while also explaining why they
Cases
Case 1: Bridgestone versus IBM
1. Students’ answers may vary. Suggestions for things that Bridgestone could have done differently
might include: prioritizing the project internally in terms of financial and human resource
2-6
Ethics in Information Technology, Sixth Edition
allocation; ensuring that its internal staffing for the project included developers who were familiar
with the company’s legacy system as well as employees who had the expertise to assess the
2. Students’ answers may vary depending on their point of view and any online research they may
have done. Some students might point out that because IBM’s business success is based on its
3. Students’ answers may vary depending on the results of their research and the current status of the
case.
Case 2: SAP Found in Violation of FCPA
1. Students’ answers may vary. Some students might suggest that too few companies (and individuals)
are convicted of violations under the FCPA for it to be an effective deterrent. Others might point out
that while the potential penalties might be sufficient to encourage companies to implement systems
2-7
Ethics in Information Technology, Sixth Edition
FCPA violations, higher profile prosecutions, and an increase in SEC staffing to allow for an
2. Students’ answers may vary depending on their work experience. Some students might suggest that
a company that discovers its software is lacking in good internal control features should seriously
3. Students might suggest that IT workers could prepare themselves for the responsibility that comes
along with this type of work by pursuing and completing certifications that would help them
increase their knowledge and develop relevant skills. Students might also suggest that IT workers