Security's Everyman

Security's Everyman

Monday, November 19, 2007

Ethics Quiz

Update to my quiz answers.

Matthew posted a comment to this original post asking for some clarification on the conditions on my answer to question #3. In his comment he mentioned something about "breaking government law" and my willingness to do so. It kind of caught me off guard so I went back and re-read the question and realized that it said "You are aware state law prohibits". I had made the incorrect assumption (due to not carefully reading the question) that the question was the same as #2 except it dealt with uninstalling software instead of installing software. Shame on me for not being more careful. So, that being said my answer is still D. Document the request and refuse to remove the software. I retract my conditional statement that follows. In this case there is no reason that I would uninstall the software and break State Law.
____________________________________________________________________

Matthew Rosenquist, the blogger who wrote the article that I referenced in my post "Are You Ethical?" wrote me a comment today and asked if I'd be willing to answer his questions and post them to the blog. So here it goes (my answers are in red).

  • 1. You are conducting a confidential investigation of Employee ‘A'. An employee outside the team, asks "Are you investigating Employee ‘A'?"
You Answer:
A. Yes, we are
B. No, we are not
C. Maybe
D. I'm not sure/I don't know
E. Other: I can't/won't comment on any investigation that may or may not be going
on.
  • 2. Policy prohibits any team member from installing software on Server ‘A'. In an emergency situation, senior management instructs you to install a critical piece of software on Server ‘A' to benefit the company.
You cite policy and:
A. Install the software
B. Refuse to install the software
C. Document the request and install the software
D. Document the request and refuse to install the software
(This is my answer based ONLY on these 4 choices)
My real answer would be dependent on exactly what the situation was, what the purpose of the server is, what the requested software is and what the implications of installing verse not installing it is.
  • 3. You are aware state law prohibits any team member from removing software on Server ‘A'. In an emergency situation, your management instructs you to delete a critical piece of software on Server ‘A'.
You cite state law and:
A. Delete the software
B. Refuse to delete the software
C. Document the request and delete the software
D. Document the request and refuse to remove the software
(This is my answer based ONLY on these 4 choices)
My real answer would be dependent on exactly what the situation was, what the purpose of the server is, what the requested software is and what the implications of installing verse not installing it is.

  • 4. Your manager instructs you to do something which is contrary to normal operating procedures. What do you do?
You cite the normal operating procedures and:
A. Do what is asked and report the incident to senior management
B. Refuse to do what is asked and report the incident to senior management
C. Document the request and do what is asked
D. Document the request, refuse to do what is asked, and report the incident to senior management
(This is my answer based ONLY on these 4 choices)
I chose to follow the request because this time it goes against SOP no policy. SOP has room to wiggle policy usually doesn't.
My real answer would be dependent on exactly what the situation was, what the purpose of the server is, what the requested software is and what the implications of installing verse not installing it is.


So, similar to Martin's comment most of these are very situational and not exactly black or white. I do believe that many situations are black and white but when dealing with technology and keeping a business safe and running situations play a big part in lots of issues. Ethics are still VERY important, but sometimes policy is wrong or hasn't taken into account every situation.

2 comments:

Anonymous said...

Andy, way to step up to the challenge! Not many have wanted to give answers in a public forum. I think they feel uncomfortable in answering questions about ethics, which is a shame and probably telling in some way. I applaud you.

In most of your answers, you qualify your preferred selection with the phrase “My real answer would be dependent on exactly what the situation was…” On Question #3 you follow it up with “…what the purpose of the server is, what the requested software is and what the implications of installing verse not installing it is.”

So aside from some extremely unlikely potentially life threatening situation, what would compel you to violate governmental laws in favor of business (managements requests) needs?

- So this is a leading question, could your answer may be viewed as the price for you to compromise your ethics? (yes, I know I am starting a discussion here…) But I think many people go down this path and job security, reputation, the upcoming bonus, or simply not wanting to ‘rock the boat’ is enough for many professionals to cave.

Would this situation truly be an ethical dilemma from the perspective of knowing the right path, or would the challenge lay in taking that path and accepting the consequences from unhappy management?

Matthew Rosenquist

Andy, ITGuy said...

Matthew, I appreciate you calling me to clarify on #3. Apparently I didn't read the question closely enough. I glanced at the question and made an assumption that it was the same as #2 except that it was dealing w/ uninstalling and not installing software. So, now that I realize that I misread the question I leave my answer as D but take away the conditional statement. I WOULD NOT knowingly violate a law to please my manager.

I admit that I do occasionally speed but beyond that I try my best to stay within the bounds of law at work and in my personal life. As I have said ethics are not only key in succeeding in business but also in life in general.

Thanks for pointing this out.

Creative Commons License
This work is licensed under a Creative Commons Attribution-NC-SA 3.0.