Learning Objectives
By the end of this chapter, you will be able to:
- Distinguish between morality, ethics, and professionalism in a business IT context.
- Distinguish between what is legal and what is ethical.
- Identify common ethical dilemmas faced by business managers managing digital systems.
- Explain the role and principles of a professional Code of Ethics (such as ACM and IEEE).
- Apply a simple framework to resolve an ethical dilemma.
Morality, Ethics, and Professionalism
As businesses become increasingly digital, managers and IT professionals hold custody of sensitive customer data, financial records, and operational infrastructure. Technical ability without ethical grounding creates substantial legal, financial, and reputational risk.
- Morality: An individual’s personal belief system and values regarding right and wrong, often shaped by culture, family, and religion.
- Ethics: Formal, standardized systems of rules, codes of conduct, or moral principles recognized by a specific group, profession, or organization.
- Professionalism: The standard of competence, objective decision-making, accountability, and integrity expected of an individual practicing in their field.
flowchart TD
M[Morality<br/>Personal values & conscience] --> D[Ethical Decision-Making]
E[Ethics<br/>Organizational & professional codes] --> D
P[Professionalism<br/>Competence & accountability] --> D
D --> O[Responsible Business Action]
| Aspect | Morality | Ethics | Professionalism |
|---|---|---|---|
| Source | Individual conscience, culture | Group, profession, or organization | Standards of a profession and workplace |
| Form | Personal, often unwritten | Written codes and policies | Expected behaviour and competence |
| Example | “I should not lie” | “Do not disclose customer data” (company code) | Meeting deadlines, keeping skills current, owning mistakes |
Characteristics of an IT professional
- Competence: keeps knowledge and skills up to date.
- Integrity: honest about what systems can and cannot do.
- Confidentiality: protects client and employer information.
- Accountability: takes responsibility for work, including mistakes.
- Respect: treats colleagues, users, and clients fairly.
- Objectivity: avoids conflicts of interest (e.g., recommending a vendor because of a personal commission).
Legal vs Ethical
Something can be legal but unethical, or (more rarely) ethical but illegal. Laws set the minimum standard; ethics asks what is right.
| Situation | Legal? | Ethical? |
|---|---|---|
| Using customer emails for marketing when the sign-up form was unclear | Possibly (grey area) | Questionable |
| Reading employees’ personal messages on a company laptop without a policy | Unclear | Generally unethical |
| Releasing software known to have a serious security flaw to meet a deadline | Often legal | Unethical |
| Installing pirated software in the office | Illegal | Unethical |
Ethical Dilemmas in Business Information Systems
Business leaders frequently face decisions where technical capability collides with ethical responsibility:
- Employee Privacy vs. Monitoring: While software tools enable keystroke logging, screen capture, and email auditing, managers must balance organizational security against an employee’s reasonable expectation of dignity and privacy.
- Data Commodification & Customer Consent: Aggregating customer purchase patterns and selling user profiles to third-party ad networks may be technically feasible and profitable, but doing so without explicit, informed consent violates basic privacy ethics.
- Algorithmic Bias: When businesses deploy automated credit-scoring or resume-screening algorithms, they bear moral responsibility if historical data perpetuates discrimination against specific demographics.
- Whistleblowing & Responsible Disclosure: When an employee or manager discovers a critical security vulnerability or data leak, ethical responsibility mandates reporting it rather than concealing it to protect share price.
- Intellectual Property: Copying software, designs, or content without permission, or using pirated software to cut costs.
- Conflicts of Interest: An IT manager choosing a supplier owned by a relative, or accepting gifts from vendors bidding for a contract.
Professional Codes of Ethics
Recognized international bodies maintain formal codes of conduct that provide actionable decision frameworks:
- ACM Code of Ethics and Professional Conduct: Emphasizes contributing to society and human well-being, avoiding harm, being honest and trustworthy, and respecting privacy and intellectual property.
- IEEE Code of Ethics: Commits professionals to hold paramount the safety, health, and welfare of the public, and to avoid unlawful or discriminatory practices.
Many organizations also have their own code of conduct and acceptable use policy (AUP) that staff sign, covering use of company devices, data handling, and social media.
Resolving an Ethical Dilemma: A Simple Framework
- Identify the facts — what exactly is happening, and who is affected?
- Identify the stakeholders — customers, employees, shareholders, society.
- Check laws and codes — relevant laws, the company code, and professional codes.
- Consider options — list possible actions and their consequences for each stakeholder.
- Apply tests — Would I be comfortable if this appeared in the newspaper? Would I accept it if I were the customer?
- Decide and act, then document and review the outcome.
Case
A marketing manager at a Nepali e-commerce company proposes selling customers’ phone numbers and purchase histories to an insurance company for extra revenue. Customers never agreed to this. Applying the framework: customers are harmed by unwanted calls and loss of privacy; the Individual Privacy Act, 2075 protects personal information; professional codes require respecting privacy. The ethical choice is to refuse, or to ask customers for clear opt-in consent before sharing any data.
Nepal Context
In Nepal, the Electronic Transactions Act, 2063 addresses cybercrime and unauthorized access, and the Individual Privacy Act, 2075 protects personal data. Professional bodies and the Computer Association of Nepal (CAN Federation) promote responsible IT practice. Common local ethical issues include software piracy, sharing of private photos and data on social media, and misuse of customer data by employees.
Summary
Technical competence alone does not make an effective or responsible business leader. Ethical judgment bridges technical systems and organizational trust. While personal morality informs conscience, professional codes of ethics provide universal benchmarks for protecting stakeholder privacy, data integrity, and fairness in modern digital enterprises. Laws set minimum standards, but many IT decisions fall in grey areas where a structured ethical framework, professional codes, and company policies guide the right action.
Key Takeaways
- Morality is internal and personal; ethics represents shared professional and organizational standards.
- Professionalism means competence, integrity, confidentiality, and accountability.
- Legal does not always mean ethical.
- Digital leaders must govern privacy, surveillance, algorithmic fairness, and data sharing ethically.
- Professional codes (ACM/IEEE) guide managers through complex dilemmas involving technology and society.
Review Questions
- How do ethics and morality differ in a corporate IT setting?
- Give an example of an IT practice that might be technically legal but ethically questionable.
- Why should business executives care about professional codes of ethics when procuring or managing software?
- What are the characteristics of an IT professional?
- Using a step-by-step framework, explain how a manager should resolve an ethical dilemma involving customer data.
