Instructions

Read the following short fact pattern, and then answer the $3$ questions below.

Fact Pattern:

AAA Security is a provider of computer security services, including penetration tests, security audits, application testing, and other standard services. AAA is known for providing budget services $-$ it's not one of the best known or most renowned providers, but it's reasonably costed and gets the job done, and so has a large and diverse customer base, generally of smaller businesses. However, AAA is able to hold down it's costs by subcontracting much of its work to outside contractors and taking a 'don't look too closely' approach to who it contracts with. Additionally, it holds down its insurance costs by refusing to cover damages incurred after a brief period of time $($usually only $30$ days after services are rendered$).$

It has come to AAA Security's attention that one of its subcontractors has been apprehended for stealing and selling personal and business data, obtained through illegitimate hacking, often on systems that they first encountered as a subcontractor working for AAA Security. There is no evidence that any of the information was obtained during the work done for AAA Security, and all of the criminal behavior occured outside of the $30$ day window that AAA provides a warranty. Because of those facts, AAA leadership has decided not to notify any of their prior customers. Additionally, since this is the first time this has happened $($at least that they know of$),$ they have no intentions of enhancing their background checks or other parts of their subcontractor screening process, or to bring their subcontracted work in house, as doing so would drive their costs up and cause them to not be able to provide their services for the low, low cost they've been able to$.$

Question $1$:

Pick one of the three ethical systems we went over in class $($virtue$,$ deontological, or consequentialist ethics$),$ and examine AAA Security's business practices in light of that system. If you use virtue ethics, use your own virtues as espoused in the blackboard prompt. If you use deontological ethics, use the $2$ Kantian categorical imperatives we discussed. If you use consequentialist ethics, use the J$.$ S$.$ Mill formulation we discussed. Determine if AAA is acting ethically according to the system you select.

Question $2$:

Examine AAA Security's business practices in light of the ACM code of ethics. Determine if AAA is acting ethically according to the ACM Code of ethics.

Question $3$:

Determine if AAA Security is acting ethically in light of your answers to questions $1$ and $2.$