Ethical Strategy, Reputation, and the Future of Business

Introduction

Business ethics is not an activity added after strategy has been formulated. It is a condition of strategic quality. A strategy determines how an organization creates value, for whom it creates value, what risks it accepts, and how it uses power and information. Each of these decisions has ethical consequences. A strategy may be financially attractive in the short term yet destroy trust, expose the firm to regulatory sanctions, or weaken its long-term capacity to compete.

For managers, the central challenge is therefore to integrate ethical reasoning into strategic management, governance, enterprise risk management, data analytics, crisis response, and reputation building. This integration requires more than codes of conduct. It requires systems that identify affected stakeholders, test assumptions, allocate accountability, detect emerging risks, and enable responsible action under uncertainty.

This chapter develops an integrated approach. It explains how ethics shapes strategic choices; how governance converts values into organizational controls; how ethical risks can be assessed at enterprise level; how analytics and artificial intelligence create both value and moral hazards; how organizations should prepare for and respond to crises; and how scenario analysis can help leaders anticipate future ethical challenges.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain the relationship between ethical reasoning, competitive strategy, and long-term value creation.
2. Integrate stakeholder interests, governance, and ethical controls into strategic decision-making.
3. Assess ethical risks using enterprise risk-management principles and prioritization tools.
4. Evaluate the ethical use of analytics, artificial intelligence, and organizational data.
5. Design a trust- and reputation-management approach, including ethical crisis response.
6. Use scenario analysis and emerging-trend assessment to anticipate future ethical challenges.
7. Critically evaluate the limitations of ethical strategies, metrics, and assurance systems.

1. Ethics as a Strategic Capability

1.1 From compliance to strategic ethics

Compliance asks whether conduct satisfies applicable law and regulation. Business ethics asks whether conduct is responsible, fair, honest, and defensible even where the law is incomplete or silent. Strategic ethics connects these questions to the organization’s purpose, business model, resource allocation, and competitive position.

A compliance-oriented organization may ask, “Can we legally collect and use this customer data?” A strategically ethical organization also asks, “Would customers reasonably expect this use? Could the practice disadvantage vulnerable people? Can we explain it transparently? What consequences could arise if the practice became public?”

Ethics becomes a strategic capability when it improves the organization’s ability to make sound decisions under uncertainty. This capability has several components:

• Moral awareness: recognizing that a decision has consequences for rights, welfare, fairness, or trust.
• Moral judgment: evaluating alternatives using principles, evidence, and stakeholder perspectives.
• Moral courage: acting on a justified judgment despite pressure or personal cost.
• Organizational support: systems that reward responsible conduct and protect challenge and dissent.
• Learning capacity: using incidents, complaints, audits, and stakeholder feedback to improve decisions.

1.2 Ethical strategy and value creation

Traditional strategy often emphasizes economic value, competitive advantage, and shareholder returns. A broader view recognizes that value is co-created with employees, customers, suppliers, communities, governments, and investors. The organization depends on these stakeholders for resources, legitimacy, knowledge, and cooperation.

An ethical strategy does not mean satisfying every demand equally. It means making explicit how competing interests will be considered and why a particular decision is justified. For example, closing an unsafe facility may protect employees and customers but impose costs on investors and a local community. Ethical strategy requires transparent reasoning, mitigation of foreseeable harm, and fair treatment of affected groups.

A useful strategic test considers four questions:

1. Purpose: What legitimate social or customer problem does the business address?
2. Stakeholders: Who gains, who bears costs, and who has limited power to protect their interests?
3. Means: Are the methods used to create value consistent with rights, fairness, honesty, and human dignity?
4. Durability: Can the strategy remain legitimate if fully disclosed and applied over time?

The final question is especially important. A strategy that depends on secrecy, manipulation, exploitation, or regulatory weakness is often strategically fragile even when immediately profitable.

1.3 Ethical lenses for strategic decisions

Managers can improve strategic judgment by applying multiple ethical lenses rather than relying on a single principle.

Consequentialism evaluates likely outcomes. It asks whether total benefits outweigh harms and whether less harmful alternatives exist. Its weakness is that aggregate benefits can conceal serious harm to minorities.

Deontological ethics emphasizes duties, rights, and constraints. It asks whether a decision respects informed consent, privacy, non-discrimination, and truthfulness. Its strength is protection against treating people merely as means; its difficulty is resolving conflicts among duties.

Justice and fairness approaches examine the distribution of benefits, burdens, opportunities, and procedures. They are particularly relevant to algorithmic discrimination, executive compensation, access to essential services, and global supply chains.

Virtue ethics focuses on character and institutional habits. It asks what a trustworthy, courageous, or responsible organization would do. This lens helps explain why formal rules are insufficient if leaders reward opportunism.

Stakeholder theory treats affected parties as legitimate participants in strategic analysis. It does not require identical outcomes, but it requires that stakeholder interests not be ignored simply because a group lacks economic power.

These perspectives may produce tension. A profitable factory closure may maximize aggregate efficiency but harm a community; a strict privacy rule may protect rights but reduce personalization. Senior managers should make such tensions visible, document the reasoning, and identify compensatory or mitigating actions.

2. Governance: Converting Values into Accountability

2.1 The governance architecture

Corporate governance is the system by which an organization is directed, controlled, and held accountable. Ethical governance allocates responsibility for decisions, establishes oversight, manages conflicts of interest, and ensures that reliable information reaches decision makers.

A robust governance architecture normally includes:

• a board that oversees purpose, culture, risk, and long-term consequences;
• committees with relevant expertise, such as audit, risk, remuneration, sustainability, or technology committees;
• executives who translate commitments into policies, controls, incentives, and operational decisions;
• independent assurance through internal audit, compliance, legal review, or external assurance;
• reporting channels through which employees and stakeholders can raise concerns;
• transparent reporting on material ethical and non-financial risks.

Governance is not equivalent to bureaucracy. Controls should be proportionate to risk, clear enough to guide behavior, and flexible enough to address unusual situations.

2.2 The board’s ethical responsibilities

Boards should not attempt to manage every operational decision. Their ethical role is to ensure that management has identified material risks and that the organization’s incentives and culture support responsible conduct. Important board questions include:

• Is the business model dependent on misleading customers, excessive leverage, worker vulnerability, or regulatory arbitrage?
• Are risk reports complete, independent, and understandable?
• Do compensation systems reward sales or growth without accounting for harm, misconduct, or remediation costs?
• Can employees safely challenge senior leaders?
• Does the organization have credible plans for data breaches, product failures, environmental incidents, or public allegations?

A board may be legally compliant yet ethically ineffective if it receives only favorable information or treats reputation as a communications issue rather than a governance issue.

2.3 Incentives and ethical culture

Culture is shaped by what leaders pay attention to, reward, tolerate, and punish. A code of ethics has limited effect when employees observe that high-performing individuals are protected from consequences. Incentive systems should therefore include quality, safety, customer outcomes, employee conduct, risk management, and remediation—not merely revenue or share price.

A useful principle is balanced accountability: individuals should be accountable for both results and the methods used to achieve them. This does not mean punishing every failed decision. Ethical organizations distinguish between responsible risk-taking, negligence, concealment, and deliberate misconduct.

3. Enterprise Ethical Risk Management

3.1 What is ethical risk?

Ethical risk is the possibility that a decision, action, omission, or business relationship will violate legitimate expectations, rights, duties, or standards of responsible conduct and thereby cause harm or loss of trust. Ethical risk can produce legal, financial, operational, strategic, human, and reputational consequences.

Examples include:

• discriminatory hiring or lending models;
• unsafe products or services;
• misleading sustainability claims;
• forced or exploitative labor in a supply chain;
• conflicts of interest in procurement;
• misuse of confidential or personal data;
• retaliation against whistleblowers;
• excessive executive incentives that encourage manipulation;
• corruption or improper influence in public contracting.

Ethical risk differs from ordinary uncertainty because it involves questions of responsibility and legitimacy, not only probability and loss.

3.2 Integrating ethics into enterprise risk management

Enterprise risk management (ERM) coordinates the identification, assessment, treatment, monitoring, and reporting of risks across the organization. Ethical concerns should be integrated into the same process rather than placed in an isolated “ethics register.”

A basic risk-prioritization model can use expected exposure:

Here, E is expected exposure, P is the estimated probability of an event, and I is the estimated impact if it occurs. The model assumes that probability and impact can be estimated on compatible scales and that a single average value is useful for initial prioritization. It is not a complete ethical analysis: rare events with catastrophic consequences, such as systemic discrimination or major privacy violations, may deserve attention even when E is numerically modest.

Impact should be assessed across several dimensions rather than reduced to immediate financial loss. A practical assessment may consider human harm, legal exposure, operational disruption, financial cost, environmental damage, stakeholder trust, and strategic legitimacy. Probability estimates should be based on evidence, historical data, expert judgment, and plausible scenarios; false precision should be avoided.

A risk register should record the risk owner, affected stakeholders, causes, existing controls, warning indicators, treatment plan, escalation threshold, and review date. Ethical risk owners must have authority and resources. Assigning responsibility without decision rights merely creates symbolic accountability.

3.3 Risk treatment

Organizations generally respond to risk by avoiding, reducing, transferring, accepting, or exploiting it. Ethical risk requires caution with “transfer.” Outsourcing a harmful activity does not remove responsibility if the organization selected the supplier, benefits from the activity, or failed to exercise reasonable oversight.

Risk reduction may involve product redesign, stronger consent, supplier audits, segregation of duties, independent review, employee training, access restrictions, or customer remediation. Risk acceptance should be explicit, informed, time-bound, and approved at the appropriate level. A decision to accept risk is not ethically defensible when decision makers conceal the risk from those who bear it.

4. Analytics, Artificial Intelligence, and Ethical Decision-Making

Analytics can improve forecasting, fraud detection, resource allocation, and customer service. It can also scale unfairness and make harmful decisions appear objective. Ethical analytics therefore requires governance across the entire data lifecycle: collection, labeling, modeling, deployment, monitoring, and deletion.

4.1 Key ethical risks

Privacy and consent: Data may be collected for one purpose and later used for another. Notice that is technically available but incomprehensible may not constitute meaningful consent.

Bias and discrimination: A model can discriminate through explicit variables, proxy variables, biased training data, or unequal error rates. Removing sensitive attributes does not guarantee fairness because other variables may reproduce their effects.

Opacity and explainability: Individuals may be unable to understand or challenge a consequential automated decision. Explanations should be appropriate to the decision, audience, and regulatory context.

Security and misuse: Data may be exposed, re-identified, manipulated, or used for surveillance beyond the original purpose.

Automation bias: Employees may defer to a system even when its recommendation conflicts with professional judgment or contextual evidence.

Accountability gaps: Responsibility may become unclear when a model is supplied by a vendor, modified by a technical team, and used by an operational manager.

4.2 A responsible analytics control framework

Before deployment, managers should define the legitimate purpose, affected populations, prohibited uses, data provenance, decision authority, and appeal mechanism. During deployment, they should monitor performance across relevant groups, document model changes, test for drift, and maintain human review for high-impact decisions. After deployment, they should provide correction, redress, and a process for suspension or withdrawal.

Fairness is not a single universal metric. Different measures can conflict, particularly when groups have different base rates. Consequently, the organization must define the relevant conception of fairness in relation to the decision, legal duties, stakeholder expectations, and potential harms. Technical testing should support—not replace—normative judgment.

A responsible AI committee should include business, legal, risk, technical, human-resources, and affected-user perspectives. Its mandate should include approval, monitoring, incident response, and retirement of systems.

5. Trust, Reputation, and Legitimacy

5.1 Trust as a strategic asset

Trust is the willingness of a stakeholder to accept vulnerability based on positive expectations about another party’s competence, integrity, and benevolence. Customers trust a firm to deliver as promised; employees trust it to treat them fairly; investors trust its reporting; communities trust it to manage external impacts responsibly.

Reputation is the collective evaluation formed by stakeholders over time. It is related to trust but not identical. Reputation is an external judgment; trust is a relationship involving willingness to rely. A firm may have a strong general reputation but low trust in a particular product or market.

Trust and reputation are built through repeated evidence. Communications can clarify conduct, but communications cannot sustainably substitute for conduct. This distinction is critical in sustainability reporting, purpose campaigns, and crisis management.

5.2 Reputation risk and measurement

Reputation risk arises when stakeholder expectations and organizational behavior diverge. Indicators may include complaint patterns, employee turnover, customer retention, supplier disputes, regulatory inquiries, social-media sentiment, media coverage, whistleblowing reports, and trust surveys. These indicators are imperfect and should be triangulated.

A reputation dashboard should avoid treating sentiment as a complete measure of ethical performance. Positive sentiment may reflect effective public relations while hidden harms continue. Conversely, criticism may arise from a responsible decision that imposes short-term costs. Managers should link reputation indicators to underlying conduct, stakeholder outcomes, and independent assurance.

A useful reputation process has four stages:

1. identify material stakeholder expectations;
2. compare actual practices with those expectations;
3. address gaps through operational improvement;
4. communicate evidence, uncertainty, and remediation honestly.

6. Ethical Crisis Response

A crisis is an event or allegation that threatens people, operations, legitimacy, or the organization’s ability to pursue its strategy. Ethical crisis response begins before the crisis. Preparation includes scenario exercises, clear authority, contact lists, escalation rules, spokesperson training, data-preservation procedures, and tested continuity plans.

During a crisis, leaders should prioritize human safety and harm reduction over image protection. They should establish facts without delaying necessary protective action, communicate what is known and unknown, avoid speculation, and provide regular updates. If the organization caused or contributed to harm, it should acknowledge responsibility, avoid blaming victims, and explain corrective action.

A credible response normally includes:

• immediate protection of affected people;
• independent investigation where credibility is contested;
• preservation of evidence;
• notification of relevant authorities and stakeholders;
• proportionate compensation, remediation, or repair;
• transparent explanation of root causes;
• changes to systems, incentives, and leadership where required;
• follow-up reporting on whether corrective actions worked.

Apologies are ethically meaningful when they accept responsibility and are accompanied by remedy. A carefully worded denial may reduce short-term legal exposure but deepen long-term distrust if later evidence contradicts it.

Illustrative crisis scenario

Background: A fictional financial-services company, Meridian Credit, uses an automated model to approve small-business loans. The model increases processing speed and reduces defaults, but a journalist reports that applications from businesses in certain postal areas are rejected at significantly higher rates.

Problem: Management initially argues that the model does not use ethnicity. An internal review finds that location and historical repayment data function as proxies for demographic disadvantage. The company faces possible discrimination, regulatory scrutiny, customer loss, and reputational damage.

Analysis: The issue is not solved by showing that the model predicts repayment accurately. The relevant questions are whether the data reflect historical inequality, whether affected applicants received meaningful explanations, whether less discriminatory alternatives exist, and whether the benefits of automation justify the unequal burden.

Approach: Meridian pauses automated rejection for high-risk cases, provides human review and appeal, commissions an independent audit, informs regulators, tests alternative models, and publishes a summary of findings. It compensates eligible applicants who suffered measurable loss, retrains staff, and changes executive incentives to include equitable access and complaint resolution.

Outcome: The company incurs immediate costs and slower processing but restores regulatory confidence and improves the model’s performance across groups. The case illustrates that ethical crisis response is operational, not merely rhetorical.

Learning points: Technical accuracy does not equal fairness; removing sensitive data does not remove bias; independent review improves credibility; and remediation should address both individual harm and system design.

7. Scenario Analysis and Emerging Ethical Challenges

7.1 Why scenario analysis matters

Forecasts often extend current trends, while ethical challenges frequently arise from interactions among uncertain developments. Scenario analysis constructs plausible, coherent accounts of alternative futures. It is not prediction. Its purpose is to test whether strategy remains responsible under different conditions.

A scenario process should:

1. define the focal strategic question and time horizon;
2. identify driving forces, including technology, regulation, demographics, climate, geopolitics, labor markets, and social expectations;
3. distinguish relatively certain trends from critical uncertainties;
4. construct a small number of contrasting but plausible scenarios;
5. examine stakeholder impacts, ethical risks, and strategic assumptions in each;
6. identify early-warning indicators and no-regret actions;
7. assign ownership and review the scenarios as evidence changes.

For example, a company deploying workplace AI might examine scenarios involving strict regulation and high public trust; weak regulation and low trust; rapid technical progress with labor displacement; and fragmented global rules. Each scenario raises different questions about consent, worker surveillance, employment transitions, accountability, and access.

7.2 Emerging ethical challenges

Managers should monitor several developments:

• generative AI that produces persuasive but inaccurate content;
• synthetic media and identity manipulation;
• autonomous systems making high-impact decisions;
• biometric surveillance and increasingly intrusive personalization;
• climate transition risks affecting workers, communities, and asset owners;
• supply-chain instability and forced-labor exposure;
• platform power and concentration of data and infrastructure;
• neurotechnology and increasingly intimate forms of data collection;
• misinformation that undermines markets, elections, and public trust.

The ethical response should not be technological determinism—the assumption that technology’s effects are unavoidable. Organizations make choices about design, access, deployment, governance, and acceptable use. They can choose slower deployment, stronger safeguards, independent testing, or non-deployment when risks cannot be responsibly controlled.

7.3 Strategic indicators and adaptive governance

Early-warning indicators may include new regulation, unusual complaint patterns, model-performance drift, employee resistance, supplier incidents, activist campaigns, litigation trends, or rapid changes in public expectations. Indicators should trigger predefined reviews rather than merely populate dashboards.

Adaptive governance combines stable principles with revisable procedures. Principles such as dignity, non-discrimination, privacy, honesty, and accountability provide continuity. Procedures, thresholds, technical controls, and reporting formats may change as evidence and technology evolve.

8. Limitations and Critical Evaluation

Ethical strategy has important limitations. First, stakeholders may disagree about what justice or responsible conduct requires. Second, measurement systems can create false confidence and encourage managers to optimize what is visible rather than what matters. Third, reputation incentives may encourage symbolic commitments, selective disclosure, or “ethics washing.” Fourth, global operations operate across different legal and cultural contexts, creating difficult questions about universal principles and local adaptation.

Scenario analysis is also vulnerable to groupthink, dominant assumptions, and underestimation of low-probability events. Risk models may reproduce historical bias, and independent assurance may be compromised by commercial dependence. Finally, ethical governance cannot eliminate trade-offs. It can make them more transparent, improve the quality of judgment, and reduce preventable harm.

The appropriate response is not to abandon strategy, analytics, or measurement. It is to combine quantitative evidence with qualitative judgment, stakeholder participation, independent challenge, and willingness to revise decisions. The most mature organizations treat ethics as an ongoing practice of inquiry and accountability.

Best-Practice Framework for Managers

An MBA manager can integrate the chapter’s ideas through the following cycle:

1. Clarify purpose: state the legitimate value the organization seeks to create.
2. Map stakeholders: identify interests, vulnerabilities, dependencies, and power differences.
3. Test strategic assumptions: ask who bears costs and whether the strategy remains defensible under disclosure.
4. Assign governance: define decision rights, oversight, escalation, and independent challenge.
5. Assess enterprise risk: evaluate probability, severity, uncertainty, reversibility, and distribution of harm.
6. Control data and technology: establish purpose limitation, fairness testing, security, explainability, human review, and redress.
7. Build trust through conduct: align promises, operations, incentives, and reporting.
8. Prepare for crises: rehearse response, prioritize safety, preserve evidence, and plan remediation.
9. Scan the future: use scenarios, indicators, and periodic review to anticipate emerging risks.
10. Learn and disclose: report failures honestly and demonstrate whether corrective actions worked.

Chapter Summary

Ethics is a strategic capability because it shapes the legitimacy, resilience, and long-term value of business decisions. Ethical strategy considers purpose, stakeholders, means, and durability rather than focusing only on immediate financial returns. Consequentialist, rights-based, justice, virtue, and stakeholder perspectives provide complementary tools for analyzing difficult choices.

Governance converts ethical commitments into accountability through board oversight, executive responsibility, independent assurance, reporting channels, and balanced incentives. Ethical risks should be integrated into enterprise risk management, assessed across human, legal, financial, operational, environmental, and reputational dimensions, and treated through proportionate controls.

Analytics and artificial intelligence create significant opportunities but also risks involving privacy, bias, opacity, security, automation bias, and accountability gaps. Responsible systems require governance throughout the data lifecycle and meaningful human review. Trust and reputation arise primarily from consistent conduct, not communication alone. Ethical crisis response prioritizes safety, truthfulness, investigation, remediation, and organizational learning.

Finally, scenario analysis enables managers to explore plausible futures rather than merely extrapolate current trends. Emerging technologies, climate pressures, labor transitions, surveillance, misinformation, and concentrated platform power require adaptive governance. Ethical strategy cannot remove all uncertainty or disagreement, but it can make choices more transparent, responsible, and resilient.

Key Terms

Ethical strategy: Strategic decision-making that integrates moral responsibility, stakeholder impact, and long-term legitimacy.

Strategic ethics: The application of ethical reasoning to purpose, business models, competitive choices, and value creation.

Stakeholder: An individual or group that affects or is affected by organizational decisions.

Corporate governance: The system through which an organization is directed, controlled, and held accountable.

Ethical risk: The possibility that conduct will violate legitimate expectations, rights, duties, or responsible standards.

Enterprise risk management: An organization-wide process for identifying, assessing, treating, monitoring, and reporting risks.

Expected exposure: A preliminary risk-prioritization measure calculated as probability multiplied by impact.

Risk owner: The person or function accountable for managing a specified risk.

Ethical culture: Shared organizational expectations about responsible conduct, reinforced by leadership and incentives.

Trust: A stakeholder’s willingness to accept vulnerability based on expectations of competence, integrity, and benevolence.

Reputation: The collective evaluation stakeholders form about an organization over time.

Reputation risk: The possibility that a gap between stakeholder expectations and organizational conduct will cause harm or loss of legitimacy.

Crisis response: Coordinated action to protect people, establish facts, communicate responsibly, and remediate harm after a serious event.

Algorithmic bias: Systematic and unjustified disadvantage produced by data, model design, deployment, or interpretation.

Explainability: The ability to provide understandable reasons for a model’s output or decision.

Automation bias: The tendency to over-rely on automated recommendations.

Scenario analysis: The construction and examination of plausible alternative futures to test strategy and risk assumptions.

Emerging-trend assessment: Systematic monitoring of developments that may alter future risks, opportunities, expectations, or responsibilities.

Adaptive governance: Governance that maintains stable ethical principles while revising controls and procedures as conditions change.

Review Questions

Short Answer Questions

1. Why is ethical conduct a strategic capability rather than merely a compliance requirement?
2. Distinguish trust from reputation.
3. What are the principal responsibilities of a board in ethical governance?
4. Identify three ethical risks associated with artificial intelligence.
5. Why is scenario analysis not the same as forecasting?

Long Answer Questions

1. Explain how stakeholder theory and rights-based ethics can improve strategic decision-making. Illustrate your answer with a business example.
2. Describe how ethical risk should be integrated into enterprise risk management, including risk identification, assessment, treatment, and monitoring.
3. Evaluate the relationship between organizational incentives, ethical culture, and corporate governance.
4. Discuss why reputation cannot be sustainably managed through communication alone.
5. Design a responsible analytics-governance framework for a high-impact automated decision system.

Analytical / Application Questions

1. A retailer discovers that its customer-personalization system uses sensitive behavioral data in ways customers did not reasonably expect. Apply the four strategic ethics questions—purpose, stakeholders, means, and durability—to recommend a course of action.
2. A manufacturing firm faces evidence of unsafe labor conditions at a contractor’s facility. Analyze whether outsourcing transfers the firm’s ethical responsibility and propose an enterprise risk response.
3. Construct two contrasting scenarios for a bank introducing generative artificial intelligence into credit assessment. Identify ethical risks, early-warning indicators, and no-regret actions for each scenario.

Multiple Choice Questions with Answers

Question 1

Which statement best describes ethical strategy?

A. A strategy focused exclusively on maximizing quarterly profit

B. A strategy that integrates purpose, stakeholder impact, responsible means, and long-term legitimacy

C. A strategy that delegates all ethical decisions to the legal department

D. A strategy that avoids all forms of business risk

Correct Answer: B. A strategy that integrates purpose, stakeholder impact, responsible means, and long-term legitimacy

Question 2

In the preliminary risk model E = P × I, what does I represent?

A. Independence of the assessor

B. Information quality

C. Impact if the event occurs

D. Internal control effectiveness

Correct Answer: C. Impact if the event occurs

Question 3

Why is removing a sensitive attribute from an algorithm insufficient to guarantee fairness?

A. Models cannot process numerical data

B. Other variables may act as proxies for the sensitive attribute

C. Sensitive attributes are always legally required

D. Human review automatically eliminates discrimination

Correct Answer: B. Other variables may act as proxies for the sensitive attribute

Question 4

Which action is most consistent with ethical crisis response?

A. Delay all communication until every fact is certain

B. Protect affected people, communicate known and unknown facts, and provide remediation

C. Focus primarily on minimizing negative media coverage

D. Transfer responsibility entirely to a supplier

Correct Answer: B. Protect affected people, communicate known and unknown facts, and provide remediation

Question 5

What is the principal difference between reputation and trust?

A. Reputation concerns internal controls, while trust concerns accounting

B. Reputation is a collective evaluation, while trust involves willingness to accept vulnerability

C. Reputation is always measurable, while trust is never measurable

D. Reputation is legally enforceable, while trust is not

Correct Answer: B. Reputation is a collective evaluation, while trust involves willingness to accept vulnerability

Question 6

Which governance practice best supports ethical culture?

A. Rewarding results regardless of the methods used

B. Protecting high performers from accountability

C. Linking incentives to results, conduct, risk management, and stakeholder outcomes

D. Limiting ethical discussions to annual compliance training

Correct Answer: C. Linking incentives to results, conduct, risk management, and stakeholder outcomes

Question 7

The primary purpose of scenario analysis is to:

A. Predict one certain future with precision

B. Replace managerial judgment with statistical models

C. Test strategy against plausible alternative futures and uncertainties

D. Eliminate all organizational risk

Correct Answer: C. Test strategy against plausible alternative futures and uncertainties

Question 8

Which statement about outsourcing ethical responsibility is most accurate?

A. Outsourcing always transfers responsibility to the contractor

B. A firm may retain responsibility when it benefits from or fails to oversee harmful outsourced activity

C. Outsourcing removes the need for supplier monitoring

D. Only the contractor’s local law is relevant

Correct Answer: B. A firm may retain responsibility when it benefits from or fails to oversee harmful outsourced activity

Question 9

What is automation bias?

A. The tendency to distrust every automated system

B. The tendency to over-rely on automated recommendations

C. The use of automation to reduce energy consumption

D. The intentional programming of discriminatory outcomes

Correct Answer: B. The tendency to over-rely on automated recommendations

Question 10

Which is an example of adaptive governance?

A. Keeping all procedures unchanged despite new technology and evidence

B. Replacing ethical principles whenever public opinion changes

C. Maintaining principles such as dignity and accountability while revising controls as conditions evolve

D. Allowing each employee to define ethical standards independently

Correct Answer: C. Maintaining principles such as dignity and accountability while revising controls as conditions evolve