ILE

• Morality


  Principles regarding the distinction between right and wrong
• Ethics


  The study of what is good and bad. It also refers to attempts at building ethical frameworks
• Normative ethics


  A branch of ethics that focuses on the principles and morals governing what is right and wrong
• Ethical dilemma


  A case or scenario where two or more options are presented, each presenting an ethically undesirable outcome, but only one choice is possible
• The key aspect of an ethical dilemma is the conflict between the choices presented. No matter the choice that is made, the consequences will be unethical. By definition, an ethical dilemma therefore has no right answer.
• Purpose of an ethical dilemma

  To investigate our own responses and provide us with important moral insights into our own thought processes
• Moral reasoning


  The process of thinking through an ethical issue and deciding what should be done
• The moral reasoning process does allow us to investigate our own responses and provides us with important moral insights into our own thought processes.
• Ethical implications of being a software developer

  • Privacy & security
  • Bias and discrimination
  • Intellectual property
  • Environmental impact
  • Transparency and accountability
• Generally these are not born of malicious intent. Rather, the aim seems to be to maintain profit or to avoid financial loss.
• Moral distance


  A physical or psychological distance from a decision and its consequence that affects a person's ethical judgment
• "Many hands" problem


  When many people are involved, the responsibility and ethics become diffused
• Greater globalisation has created a much more complex work environment that spans diverse cultures and societies, making it more difficult to apply principles and codes of ethics consistently.
• In today's difficult and uncertain economic climate, organisations are extremely challenged to maintain revenue and profits. Some organizations are sorely tempted to resort to unethical behaviour to maintain profits.
• As technology permeates all spheres of life, ethical behaviour now includes areas previously seen as the government's responsibility e.g., the environment, societal issues, political correctness, health and safety, etc.
• Right


  Rights are entitlements to either be able to do something or to be in a certain state. The reverse also applies: the right for someone to not do something to you and the right for you to not be in a certain state.
• Obligation


  A duty or responsibility you have to fulfil from a moral, legal, or social perspective.
• The Consumer Protection Act of 2008 in South Africa has 3 important aims: promotion of a fair, sustainable marketplace, ensuring consumer protection, and promoting responsible consumer behaviour.
• Consumer rights under the Consumer Protection Act

  • Right to equality
  • Right to privacy
  • Right to choose
• Law


  A system of rules that tells us what we can and cannot do. Laws are enforced by a set of institutions such as the police or the government.
• Ethics and the law


  Law is a public expression of social morality and also is its sanction. Law cannot in any way replace or substitute for morality, and therefore we cannot arbitrarily equate what is legal with what is moral.
• Professional code of ethics


  Principles and core values that are essential to the work of a particular occupational group. It outlines what the organisation aspires to become, and lists rules and principles by which members of the organisation are expected to abide.
• Carbon footprint


  A measure of the amount of greenhouse gases, primarily carbon dioxide (CO2), that are released into the atmosphere as a result of human activities.
• Corporate Social Responsibility (CSR)


  The concept that an organization should act ethically by taking responsibility for the impact of its actions on the environment, the community, and the welfare of its employees.
• Corporate Social Investment (CSI)


  External support and investment the company provides to contribute to its community.
• Zero-day attack


  An attack aimed at a vulnerability the developer is not aware of
• Supply chain sustainability


  A component of CSR that focuses on developing and maintaining a supply chain that meets the needs of the present without compromising the ability of future generations to meet their needs.
• If another party like the government or a criminal detects the vulnerability, it is still a zero-day vulnerability until the developer is aware of it
• Philanthropy


  A form of CSI through which an organization can demonstrate its values in action and make a positive connection with its stakeholders. Companies donate money to charitable causes.
• In ethics there is an equivalence principle which states that actively doing harm is just as bad as not acting to prevent harm. This means that not reporting these vulnerabilities is just as bad as exploiting them yourself
• Types of attacks


  • Zero-day attacks
  • Ransomware
  • Worms, viruses, trojans
  • DDoS attacks
  • Phishing
  • Rootkits
• Types of perpetrators


  • Hackers and crackers
  • Malicious insiders
  • Industrial spies
  • Cybercriminals
  • Hacktivists and cyberterrorists
• Reasons why computer incidents are prevalent

  • Increased complexity
  • User expectations
  • BYOD
  • Software reliance
  • Expanding and changing technology
  • Generation gaps
• The South African Cybercrime Act was signed into effect in December 2021 and addresses areas such as unlawful access, unlawful interception of data, unlawful acts in respect of software or hardware tools, unlawful interference with data or computer program, unlawful interference with a computer data storage medium or computer system, unlawful acquisition, possession, provision, receipt or use of password, access code or similar data or device, and theft of incorporeal property
• Risk assessment steps


  1. Prioritise assets

  2. Identify risks/threats

  3. Assess likelihood

  4. Assess impact

  5. Mitigate risks

  6. Implement measures
• Benefits of Corporate Social Responsibility

  • Gaining the goodwill of the community
  • Creating an organisation that operates consistently
  • Fostering good business practices
  • Protecting the organisation and employees from legal action
  • Avoiding unfavourable publicity
• Philanthropy


  A form of CSR where an organization demonstrates its values in action and makes a positive connection with its stakeholders by donating money to charitable causes
• In 2012 powerful DDoS attacks were directed at the Web servers of several major US banks, effectively disabling the servers. The attackers simply stopped on their own to avoid detection
• The goodwill from CSR can help grow the business
• Consistency in a company

  Allows employees to apply the company's values in their decision making