An organization's security policy states that only authorized employees are granted access to the payroll database. During the onboarding process, two newly hired employees realize they have been erroneously granted access to the payroll database.
Which security practice has been violated?
Answer : D
Confidentiality ensures that only authorized personnel have access to sensitive information.
Why Confidentiality Was Violated?
Payroll information is sensitive and should be accessible only to authorized employees.
The erroneous access granted to new hires means private financial information is at risk.
Confidentiality is a fundamental principle in cybersecurity, ensuring that data is accessed only by those who need it.
Why Not the Other Options?
A . Availability -- Ensures systems remain operational, but this case concerns unauthorized access, not system downtime.
B . Accessibility -- Relates to making data usable for authorized individuals, but this case involves an unauthorized access issue.
C . Integrity -- Ensures data remains accurate and unaltered, but the issue here is privacy, not data accuracy.
Thus, the correct answer is D. Confidentiality, as it ensures that only authorized users can access sensitive information.
Reference in Ethics in Technology:
National Institute of Standards and Technology (NIST) Cybersecurity Framework.
ISO/IEC 27001: Information Security Management Systems.
A publicly-traded organization listed on the New York Stock Exchange has been flagged for possible accounting malpractices. An auditor discovers that the company used funds to disguise payments to international officials. The auditor also finds that the system of internal control does not adequately maintain books and records that reflect all business transactions.
Which law did the organization potentially violate?
Answer : C
The Foreign Corrupt Practices Act (FCPA) prohibits U.S. companies from bribing foreign officials and requires accurate financial records.
Why FCPA Applies?
The company disguised payments to international officials, which violates the FCPA's anti-bribery provisions.
The lack of internal controls to maintain proper records also violates FCPA accounting rules.
The law applies to publicly traded companies, such as those listed on the New York Stock Exchange.
Why Not the Other Options?
A . Committee on Foreign Investment in the United States -- Regulates foreign investment, not bribery.
B . Foreign Intelligence Surveillance Act -- Covers electronic surveillance and national security, not corporate misconduct.
D . Electronic Communications Privacy Act -- Protects electronic communications from unauthorized access, unrelated to accounting fraud.
Thus, the correct answer is C. Foreign Corrupt Practices Act (FCPA) as it governs anti-bribery and financial reporting.
Reference in Ethics in Technology:
Foreign Corrupt Practices Act (FCPA), 15 U.S.C. 78dd-1, et seq.
A new IT employee has questions about how the organization determines resolutions to issues that impact its values and overarching principles. What should the employee refer to first for guidance?
Answer : C
A Code of Ethics is a formal document that outlines an organization's values, principles, and expected ethical behaviors. It serves as the first point of reference for employees seeking guidance on ethical decision-making within a company.
Why Code of Ethics?
The Code of Ethics establishes the foundational principles that guide an organization's decision-making, ensuring consistency in ethical practices.
It typically includes guidelines on conflicts of interest, integrity, fairness, and responsibility, helping employees resolve ethical dilemmas.
The new IT employee can refer to this document to understand how the company resolves ethical issues and enforces its values.
Why Not the Other Options?
A . Corporate Responsibility Matrix: This tool may help outline social and environmental responsibilities but does not explicitly guide ethical decision-making.
B . Ethical Decision-Making Processes: While important, this is a procedural framework rather than a reference document employees would check first.
D . Board of Directors: The Board oversees corporate governance but is not a direct source for employee guidance on ethical matters.
Thus, the best answer is C. Code of Ethics as it directly provides ethical standards employees should follow.
Reference in Ethics in Technology:
Moor, J. (1985). 'What is Computer Ethics?' Metaphilosophy, 16(4), 266-275.
Floridi, L. (2010). Information: A Very Short Introduction. Oxford University Press.
Association for Computing Machinery (ACM) Code of Ethics (2022).
IEEE Code of Ethics (2020).
A robotics company engages an IT firm to deliver a marketing software solution. During the project, the robotics company asks for additional features that were not in the initial contract. The IT firm's project leader is unsure whether it can deliver these features but verbally agrees to the scope change. On delivery, the robotics company notes that several of the additional features are not included and that because of this, the solution is not compatible with certain legacy systems the company did not initially disclose.
Which factor might have mitigated the problem if the IT firm's project leader had abided by a professional code of ethics?
Answer : B
The issue in this scenario stems from scope creep---when a project's requirements expand beyond the original contract. The IT firm's project leader verbally agreed to additional features without ensuring their feasibility, leading to incomplete delivery and incompatibility issues.
By following a professional code of ethics, the project leader would have:**
Carefully assessed whether the additional scope was feasible
Formalized the agreement in writing rather than relying on verbal commitments
Ensured realistic expectations regarding system compatibility
Relevant Ethical Reference in Technology:
Project Management Ethics (PMI Code of Ethics) -- Encourages informed decision-making and clear scope agreements.
ACM & IEEE Codes of Ethics -- Stress honest communication, responsibility, and due diligence in IT projects.
Contract Law & Professional Responsibility -- Professionals should document scope changes to avoid miscommunication.
Utilitarian Ethics (Preventing Harm) -- Poor decisions on scope cause project failures and stakeholder losses.
Thus, the correct answer is B. Improving decision-making around agreeing to additional scopes, as ethical decision-making could have mitigated scope creep issues.
A customer places an order for a product on an e*commerce site after reviewing the quantity and pricing on the online form. The customer then receives an email confirmation that displays different pricing than the order form. The customer reports the discrepancy to customer service.
Which security practice is this customer addressing?
Answer : A
Computerized Provider Order Entry (CPOE) is a digital system that allows healthcare providers to enter medication orders electronically, reducing errors related to handwriting and incomplete prescriptions.
Why CPOE?
Eliminates handwriting misinterpretation errors.
Ensures complete medication details, reducing omissions.
Often integrates decision support tools, warning about drug interactions and incorrect dosages.
Why Not the Other Options?
B . Health Information Exchange (HIE): Shares patient records across providers but does not focus on medication ordering.
C . Electronic Medical Record (EMR): Digitizes patient records but does not prevent prescription errors directly.
D . Clinical Decision Support (CDS): Helps providers make better decisions but does not replace the ordering process like CPOE does.
Thus, the correct answer is A. Computerized Provider Order Entry (CPOE), as it directly addresses prescription errors.
Reference in Ethics in Technology:
Bates, D. W. et al. (1998). Effect of Computerized Physician Order Entry and a Team Intervention on Prevention of Serious Medication Errors.
Institute of Medicine (2000). To Err is Human: Building a Safer Health System.
Which act prohibits U.S. government agencies from concealing the existence of personal data record-keeping systems?
Answer : B
Contingent workers (e.g., contractors, freelancers, or temporary employees) can provide short-term solutions for resource gaps, but they come with disadvantages.
Why is minimal internal process understanding a disadvantage?
Contingent workers do not have long-term exposure to the company's workflows, culture, or business strategies.
Training contingent workers on company-specific processes takes time and effort, reducing initial productivity.
They may not be as committed to organizational goals as full-time employees.
Why Not the Other Options?
A . Any skills gained during employment will be lost to the company at the project's completion. -- While true, companies can retain knowledge through documentation and collaboration.
C . The company may require the same worker for other projects. -- This is not a disadvantage; it could be a benefit if the worker is rehired.
D . The company does not have to provide benefits throughout the project's lifecycle. -- This is an advantage, not a disadvantage.
Thus, the correct answer is B. Internal business process understanding will be minimal given the temporary nature of the workers.
Reference in Ethics in Technology:
Kalleberg, A. L. (2000). Nonstandard Employment Relations: Part-time, Temporary, and Contract Work.
Harvard Business Review (2022). Managing Contingent Workers Effectively.
To establish an expectation among consumers that a professional will behave ethically, a nonprofit society publishes a professional code of ethics. Which benefit can be directly derived from this effort?
Answer : B
By publishing a professional code of ethics, a nonprofit society establishes ethical expectations, increasing public confidence in the profession. Ethical codes demonstrate a commitment to integrity, fairness, and responsible conduct, fostering public trust in professionals.
Relevant Ethical Reference in Technology:
ACM & IEEE Codes of Ethics -- Promote ethical awareness and public accountability.
Corporate Social Responsibility (CSR) & Ethics in IT -- Organizations gain public trust by adopting ethical guidelines.
Virtue Ethics (Character & Reputation) -- A professional code reinforces moral credibility and public respect.
Stakeholder Theory (Freeman, 1984) -- Ethical practices benefit consumers, employees, and society.
Thus, the correct answer is B. Public trust and respect, as publishing a professional code of ethics reassures consumers and strengthens the profession's credibility.