10. Ethical Culture, Conduct, and Organizational Integrity

Introduction and Context

Corporate governance is often discussed through formal structures: boards, committees, policies, controls, audits, and reporting obligations. These mechanisms are necessary, but they do not by themselves determine how people behave. Organizational conduct is also shaped by informal expectations, leadership signals, incentives, peer behavior, routines, and the perceived consequences of speaking up. A company may possess an impressive code of ethics and still tolerate manipulation, harassment, conflicts of interest, or misleading reporting if its operating culture rewards results without sufficiently examining how those results are achieved.

Ethical culture is therefore a central governance concern. It connects the organization’s stated values with everyday decisions. It influences whether employees question questionable instructions, whether managers report bad news, whether investigations are impartial, and whether the board receives an accurate picture of organizational risk. Organizational integrity exists when commitments, decisions, systems, and conduct are substantially aligned, including when that alignment creates short-term costs.

The subject is especially important at the doctoral level because ethical conduct cannot be explained by individual morality alone. Conduct emerges from the interaction of individual judgment, group norms, institutional incentives, organizational design, leadership, technology, and external regulation. Effective ethics programs must consequently be designed as organizational systems rather than treated as annual training exercises.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain the relationship among ethical culture, organizational conduct, compliance, and integrity.

2. Analyze how leadership, incentives, social norms, and behavioral biases influence misconduct.

3. Explain normalization of deviance and its relationship to organizational failure.

4. Evaluate the design of codes, training, reporting channels, investigations, and whistleblower protections.

5. Assess how boards and senior executives can measure and improve ethical culture.

6. Apply an integrated ethics framework to complex organizational situations.

7. Critically evaluate emerging risks associated with data analytics, artificial intelligence, and digital work systems.

From Formal Compliance to Organizational Integrity

Compliance asks whether an organization has followed applicable laws, regulations, and internal rules. Ethics asks a broader question: whether the organization’s conduct is responsible, fair, honest, and defensible, including in situations not directly addressed by a rule. Integrity concerns the consistency between what the organization claims and what it actually does.

These ideas overlap but are not interchangeable. A decision may be technically lawful yet ethically questionable. For example, a sales incentive may comply with disclosure requirements while encouraging customers to purchase products they do not need. Conversely, an employee may violate a minor procedural rule while acting to protect a customer or prevent serious harm. Mature governance systems distinguish legal compliance from ethical judgment without treating them as unrelated.

Ethical culture may be defined as the shared perception of what behavior is expected, rewarded, tolerated, and punished in an organization. It includes formal elements—codes, policies, controls, disciplinary procedures—and informal elements such as stories about successful employees, managerial reactions to bad news, peer pressure, and unwritten rules. Culture is not identical to employee satisfaction or corporate reputation. An organization may have high morale and a strong external image while concealing harmful internal norms.

Integrity is demonstrated through decisions under pressure. It becomes visible when targets are missed, when a powerful executive is implicated, when a customer complaint threatens revenue, or when reporting a problem may damage a colleague’s career. The critical test is not whether an organization has values statements, but whether systems make ethical conduct feasible and misconduct difficult, detectable, and consequential.

How Conduct Is Shaped

Leadership and the ethical climate

Leaders influence conduct through what they say, what they do, what they notice, and what they ignore. Ethical leadership involves more than personal honesty. It includes setting clear expectations, allocating resources to controls, inviting dissent, responding proportionately to misconduct, and accepting accountability for organizational failures.

The concept of “tone at the top” is useful but incomplete. Employees also observe the “mood in the middle” and the “reality at the operational edge.” Middle managers translate abstract values into daily priorities. If senior executives speak about integrity but middle managers threaten employees who raise concerns, the operational message is that performance matters more than ethics. Boards must therefore examine conduct throughout the hierarchy rather than relying solely on executive statements.

Leadership communication is most credible when it acknowledges trade-offs. A statement such as “meet the target by any means necessary” creates a dangerous ambiguity. By contrast, “meet the target, but do not mislead customers or compromise safety; escalate obstacles early” establishes boundaries and gives employees permission to report constraints.

Incentives and performance systems

Incentives influence attention and behavior. Financial bonuses, promotion criteria, sales rankings, procurement targets, and informal recognition can all communicate what the organization truly values. A balanced incentive system does not merely add an ethics metric to an aggressive target. It examines whether the target itself is achievable without encouraging manipulation, concealment, or excessive risk-taking.

Poorly designed incentives create moral displacement: employees focus on the measurable objective and treat broader responsibilities as secondary. Short-term sales targets may encourage unsuitable product recommendations; production quotas may encourage safety shortcuts; research deadlines may encourage selective reporting; and executive compensation tied narrowly to share price may encourage excessive financial engineering.

Effective systems combine outcome measures with process and conduct measures. They also use malus and clawback arrangements where appropriate, allowing organizations to reduce or recover rewards associated with later-discovered misconduct. Such mechanisms must be governed fairly. If employees perceive that accountability is arbitrary or politically selective, incentives can undermine trust rather than promote integrity.

Social norms and ethical fading

People rarely make ethical decisions in isolation. They interpret situations through group expectations. If colleagues routinely classify improper payments as “relationship expenses,” or describe misleading disclosures as “commercial positioning,” ethical concerns may fade from attention. Ethical fading occurs when the moral dimension of a decision is obscured by financial, technical, legal, or operational language.

Organizational stories are powerful carriers of norms. Stories about a manager who protected a whistleblower can reinforce speak-up expectations. Stories about a high performer who avoided discipline can teach that status provides immunity. Governance professionals should therefore treat informal narratives as evidence of culture, not as irrelevant workplace gossip.

Behavioral biases

Ethical failures often involve predictable cognitive biases rather than deliberate criminal intent at the outset. Important biases include:

• Overconfidence: decision-makers underestimate the probability or impact of adverse outcomes.
• Confirmation bias: individuals seek information supporting an existing conclusion and discount contrary evidence.
• Motivated reasoning: people use sophisticated reasoning to defend preferred outcomes.
• Authority bias: employees accept instructions from senior figures without adequate challenge.
• Groupthink: the desire for consensus suppresses dissent and critical evaluation.
• Self-serving bias: individuals judge their own conduct more favorably than comparable conduct by others.
• Sunk-cost bias: organizations continue a failing course because substantial resources have already been invested.
• Diffusion of responsibility: each participant assumes that someone else is accountable.

Controls should be designed with these tendencies in mind. Independent review, premortems, red-team analysis, conflict declarations, rotation of responsibilities, and structured escalation can reduce reliance on individual vigilance.

Normalization of Deviance

Normalization of deviance occurs when a departure from an expected standard becomes accepted because it has not yet produced visible harm. An exception is initially treated as temporary; repeated exceptions become routine; and the routine is eventually interpreted as normal. The organization’s understanding of acceptable performance gradually shifts.

The process is often incremental. A reporting deadline is missed, but the information is adjusted informally. A safety inspection is shortened during a busy period. A customer complaint is reclassified to preserve performance statistics. A manager discourages escalation because the issue appears minor. Each event may seem defensible in isolation. Over time, however, the organization loses its reference point.

Normalization of deviance is particularly dangerous in complex systems because harmful outcomes may be delayed. A weak control can appear successful for years until a market shock, regulator inquiry, accident, or data breach exposes accumulated vulnerabilities. The absence of prior harm is not proof that the practice is safe.

Organizations can resist normalization by defining non-negotiable standards, recording exceptions, requiring time limits and approval for deviations, examining near misses, and periodically reassessing whether a control remains effective. Boards should ask not only, “Did an incident occur?” but also, “What practices have drifted from the intended standard, and why?”

A Systems Framework for Ethical Culture

A useful analytical framework views ethical culture through six connected elements: purpose, leadership, incentives, capability, voice, and accountability.

Purpose clarifies whom the organization serves and what responsibilities accompany value creation. Purpose is credible only when reflected in resource allocation and strategic decisions.

Leadership establishes expectations through decisions, communication, role modeling, and responses to failure.

Incentives determine which behaviors receive material and symbolic rewards. They include compensation, promotion, recognition, workload allocation, and access to opportunities.

Capability includes training, professional competence, ethical reasoning, managerial capacity, and the availability of advice before decisions are made.

Voice consists of reporting channels, consultation mechanisms, psychological safety, and protection against retaliation.

Accountability includes monitoring, investigations, disciplinary consistency, remediation, board oversight, and learning from incidents.

The framework is interdependent. A confidential hotline cannot compensate for incentives that punish honesty. Training cannot compensate for leaders who disregard controls. Disciplinary action cannot create integrity if the organization lacks clear standards. Culture should therefore be assessed as a system of reinforcing or conflicting signals.

Designing an Ethics and Integrity Program

The code of ethics

A code should translate values into recognizable conduct. It should address conflicts of interest, respectful treatment, confidentiality, information integrity, customer responsibilities, use of organizational resources, gifts and hospitality, competition, reporting obligations, and protection against retaliation. A code that merely repeats legal terminology will not help employees make decisions in ambiguous situations.

Effective codes use plain language, realistic examples, and decision prompts. Employees should be encouraged to ask: Is this lawful? Is it consistent with organizational values? Would I be comfortable explaining it to an affected stakeholder? Does it create an undisclosed conflict? What would happen if the decision appeared publicly? These questions do not replace professional judgment, but they make ethical reasoning more accessible.

The code must be supported by specialized policies, local adaptation where necessary, accessible advice, and visible enforcement. Translation into local languages and adaptation to different cultural and legal contexts should preserve core principles rather than create inconsistent standards.

Training and ethical capability

Training is most effective when it is continuous, role-specific, scenario-based, and connected to actual decisions. Generic annual courses may establish awareness but often have limited effect on conduct. Directors need training on oversight and escalation; sales employees need guidance on customer suitability and representations; investigators need training on evidence and procedural fairness; managers need skills for receiving concerns without retaliation.

Scenario design should include uncertainty, competing goals, power differences, and realistic consequences. Participants should practice identifying concerns, seeking advice, documenting decisions, and escalating issues. Training effectiveness should be evaluated through behavior and organizational outcomes, not merely completion rates.

Speak-up systems

A speak-up system provides multiple routes for raising concerns, including line management, ethics officers, human resources, ombuds functions, independent hotlines, and board-level escalation for serious matters. Employees differ in their willingness to use channels, so dependence on one mechanism is unwise.

A credible system requires confidentiality to the extent possible, timely acknowledgment, competent triage, protection against retaliation, and communication about outcomes without violating privacy. Anonymous reporting can be valuable, particularly where power imbalances are strong. However, anonymity does not eliminate the need for fair investigation or protection against the identification of reporters.

Psychological safety is broader than the existence of a hotline. It means employees can question decisions, admit mistakes, and offer dissenting views without fear of humiliation or career damage. Managers should be trained to respond appreciatively at the first point of contact; a dismissive response can silence future reporting even when a formal channel exists.

Investigations

Investigations should be independent, proportionate, prompt, evidence-based, and fair to all parties. A sound process begins with intake and triage: the organization assesses seriousness, potential conflicts, urgency, preservation of evidence, and appropriate investigators. Matters involving senior leaders, financial reporting, safety, harassment, or regulatory exposure may require independent oversight and specialized expertise.

Investigators should define allegations precisely, identify relevant documents and systems, interview witnesses systematically, and distinguish facts from interpretations. They should avoid confirmation bias and premature conclusions. Procedural fairness includes giving an accused person a meaningful opportunity to respond, protecting confidentiality, and avoiding unnecessary disclosure.

The outcome should not be limited to deciding whether an individual violated a rule. Investigators should examine enabling conditions: unrealistic targets, inadequate supervision, flawed controls, ambiguous policies, or retaliation risks. Remediation may include discipline, restitution, control redesign, leadership changes, customer notification, regulator engagement, or broader culture interventions.

Whistleblower protection and retaliation prevention

Whistleblowers are individuals who report suspected wrongdoing through internal or external channels. Protection requires more than a policy statement. Organizations should prohibit retaliation, monitor employment actions affecting reporters, separate investigative decisions from implicated managers, and impose consequences for retaliatory conduct.

Retaliation can be direct, such as dismissal or demotion, or subtle, such as exclusion from meetings, undesirable transfers, negative references, social isolation, or performance ratings that depart from prior practice. A well-designed program creates a protected reporting record, assigns responsibility for monitoring, and examines adverse actions involving the reporter and close witnesses.

There is a legitimate concern that bad-faith or knowingly false reports may cause harm. This does not justify discouraging good-faith reporting. The appropriate response is fair investigation and proportionate action against deliberately abusive conduct, while preserving protection for uncertain but sincerely raised concerns.

Measurement and Oversight

Ethical culture cannot be reduced to a single score. Useful indicators include reporting volume and channel diversity, time to triage and closure, substantiation rates interpreted cautiously, repeat issues, retaliation allegations, employee survey responses, training quality, disciplinary consistency, control exceptions, audit findings, customer complaints, and turnover in high-risk units.

Metrics require interpretation. A low number of reports may indicate a healthy environment, but it may also indicate fear, inaccessible channels, or lack of awareness. An increase in reports may reflect deteriorating conduct or improved trust in the reporting system. Boards should examine trends, qualitative narratives, distribution by business unit, and relationships among indicators.

Oversight should address culture as a material risk. The board or a designated committee should receive regular reports on significant matters, patterns of misconduct, senior executive involvement, retaliation, unresolved control weaknesses, and remediation. Directors should meet employees without management present and test whether reporting systems work in practice. They should also challenge management when performance results appear inconsistent with customer outcomes, employee experience, or risk indicators.

Technology, Data, and Artificial Intelligence

Digital systems can strengthen ethics programs by enabling continuous monitoring, anomaly detection, case management, and analysis of reporting patterns. For example, analytics may identify unusual payment patterns, conflicts among vendor records, abrupt changes in sales returns, or concentration of complaints under a particular manager. Natural-language tools may help classify reports, but their outputs require human review.

Technology also creates risks. Monitoring may invade privacy, encode biased assumptions, or discourage employees from seeking advice. Automated systems may misclassify reports, overlook culturally specific language, or prioritize easily measurable concerns over serious but infrequent harms. Artificial intelligence used in recruitment, performance management, credit decisions, or customer interactions can create discrimination, opacity, and accountability problems.

Governance should establish clear purposes, data minimization, access controls, human oversight, audit trails, model validation, and escalation procedures. Organizations should not assume that automation is neutral. The ethical question is not only whether a system improves efficiency, but also whether affected individuals can understand, challenge, and obtain correction of consequential decisions.

Illustrative Case: The Quiet Adjustment

Background

Northstar Components, a fictional manufacturer, had a strong public reputation for safety and reliability. Its executive bonus plan depended heavily on quarterly delivery performance and defect rates. The company’s code required accurate reporting and encouraged employees to raise concerns.

Situation

A plant manager discovered that a testing device was producing inconsistent readings. Recalibration would require a temporary production stoppage and might cause the plant to miss its quarterly target. The manager instructed technicians to use an older device for certain batches and to record the results in the standard system. Several technicians questioned the practice. A supervisor responded that the alternative device had been used before without incident and that “everyone understood the business reality.”

Over the next year, the practice spread. No major customer injury occurred, and delivery performance improved. An internal audit later found unexplained differences between calibration records, maintenance logs, and shipment data. The initial hotline report was classified as a process dispute and closed without interviews. When a technician raised the issue again, the employee was removed from a high-profile project and received a negative performance assessment.

Analysis

The case illustrates normalization of deviance. An exceptional workaround became routine because it appeared to produce no immediate harm. Incentives emphasized delivery and defect statistics without adequately rewarding accurate escalation. Authority bias discouraged technicians from challenging the plant manager. The reporting system failed through poor triage, and the subsequent employment action created a credible appearance of retaliation.

The problem was not simply the manager’s instruction. It was systemic: unreliable equipment, inadequate escalation rules, performance pressure, weak investigation, and a culture that treated safety concerns as operational obstacles. The absence of an accident did not demonstrate that the practice was acceptable.

Approach and solution

Northstar should have immediately preserved testing and shipment records, suspended reliance on uncertain results, and appointed an independent investigation team. The investigation should examine product risk, reporting accuracy, management communications, incentive design, and the treatment of the reporting employee. Customers and regulators should be informed where required by law or safety considerations.

Corrective measures should include validated equipment, documented deviation approvals, mandatory time limits for temporary controls, revised performance metrics, manager training, independent review of safety-related reports, and monitoring for retaliation. The board committee responsible for risk should receive a full report, including the conditions that allowed the practice to continue.

Outcome and learning points

In this illustrative case, the immediate operational cost of stopping production is visible, while the risk created by unreliable testing is uncertain. Ethical governance requires decision-makers to treat uncertainty as a reason for disciplined investigation, not as permission to continue. The case demonstrates five lessons: performance targets shape conduct; near misses deserve attention; reporting systems must investigate patterns rather than labels; retaliation can be subtle; and integrity depends on correcting systems, not merely punishing individuals.

Challenges and Common Mistakes

Organizations commonly make several errors. First, they confuse policy volume with ethical maturity. A large rulebook may overwhelm employees and still leave critical judgment questions unanswered. Second, they measure completion rather than learning. Third, they centralize ethics in a specialist department while allowing operational leaders to treat it as someone else’s responsibility.

Other mistakes include investigating low-level employees while ignoring senior involvement, promising absolute confidentiality that cannot be guaranteed, failing to communicate case outcomes, treating anonymous reports as inherently unreliable, and using hotline data without examining reporting barriers. Retaliation risk is also underestimated because managers often interpret adverse actions as ordinary performance management.

A further challenge is cultural and institutional variation. A speak-up model designed in one jurisdiction may encounter different expectations about hierarchy, privacy, collective representation, or external reporting elsewhere. Global programs should maintain consistent principles while adapting communication, legal processes, and support mechanisms appropriately.

Current Developments and Best Practices

Contemporary ethics programs increasingly emphasize conduct risk, stakeholder impact, psychological safety, and organizational learning. Regulators and investors are paying closer attention to how companies handle misconduct, not merely whether they publish policies. Boards are also using employee experience data, customer outcomes, and operational indicators to supplement traditional compliance reporting.

Best practice is characterized by integration. Organizations should align purpose, strategy, incentives, leadership evaluation, training, reporting, investigation, data governance, and board oversight. They should test controls through realistic scenarios, review near misses, conduct periodic culture assessments, and make remediation visible. Senior leaders should personally sponsor ethical priorities while accepting independent challenge.

Integrity is strengthened when employees can make responsible choices without bearing unreasonable personal costs. This requires adequate staffing, achievable targets, competent advice, protection for dissent, and consistent accountability. The strongest ethics program is not the one with the most procedures; it is the one that makes responsible conduct credible, practical, and durable under pressure.

Chapter Summary

Ethical culture is the shared understanding of expected, rewarded, tolerated, and punished conduct. It develops through the interaction of leadership, incentives, social norms, behavioral biases, organizational systems, and external pressures. Compliance is necessary but narrower than ethics, while integrity concerns alignment between commitments and conduct.

Normalization of deviance explains how repeated exceptions become accepted practice, especially when harmful consequences are delayed. An effective integrity system integrates purpose, leadership, incentives, capability, voice, and accountability. Codes should offer practical guidance; training should be role-specific; speak-up channels should be accessible and trusted; investigations should be independent and fair; and whistleblowers must be protected from direct and subtle retaliation.

Boards and executives should use both quantitative indicators and qualitative evidence to assess culture. Digital analytics and artificial intelligence can support monitoring but introduce privacy, bias, opacity, and accountability risks. Ultimately, ethical conduct is sustained not by declarations alone but by systems that reward responsible behavior, expose problems early, learn from failure, and apply accountability consistently.

Key Terms

Ethical culture: Shared perceptions of the behavior expected, rewarded, tolerated, and punished within an organization.

Organizational integrity: Consistency between an organization’s values, commitments, decisions, and conduct.

Compliance: Conformity with applicable laws, regulations, standards, and internal rules.

Ethical fading: The process by which the moral dimension of a decision becomes obscured by other forms of language or analysis.

Tone at the top: Ethical expectations communicated and demonstrated by senior leadership.

Psychological safety: A shared belief that people can speak, question, or admit mistakes without unfair interpersonal or career consequences.

Normalization of deviance: Acceptance of departures from standards because they become routine and have not produced immediate visible harm.

Moral displacement: Subordination of ethical responsibilities to a narrowly measured organizational objective.

Behavioral bias: A systematic tendency in judgment or decision-making that can distort ethical evaluation.

Groupthink: Suppression of critical thought and dissent in pursuit of group consensus.

Speak-up system: Formal and informal mechanisms through which employees raise concerns or seek ethical advice.

Whistleblower: A person who reports suspected wrongdoing through internal or external channels.

Retaliation: Adverse treatment imposed because an individual raised a concern, participated in an investigation, or supported a reporter.

Investigation triage: Initial assessment of a report’s seriousness, urgency, conflicts, evidence needs, and appropriate investigative route.

Malus: Reduction or cancellation of a previously awarded incentive because of later-identified misconduct or adverse performance.

Clawback: Recovery of compensation or benefits previously paid when specified conditions, such as misconduct, arise.

Conduct risk: The possibility that organizational behavior will harm customers, stakeholders, markets, employees, or the organization itself.

Near miss: An event or condition that could have caused harm but did not, often providing evidence of control weakness.

Ethics analytics: Use of data and analytical methods to identify patterns, anomalies, or risks related to organizational conduct.

Review Questions

Short Answer Questions

1. Distinguish ethical culture from compliance.

2. What is normalization of deviance?

3. Identify four behavioral biases that may influence organizational conduct.

4. Why are speak-up channels insufficient without psychological safety?

5. What is the purpose of investigation triage?

Long Answer Questions

1. Explain how leadership, incentives, and middle management jointly shape ethical conduct.

2. Discuss the design features of an effective ethics and integrity program.

3. Analyze the relationship between whistleblower protection and organizational accountability.

4. Explain why culture cannot be measured adequately through a single indicator.

5. Evaluate the benefits and risks of using artificial intelligence in ethics monitoring.

Analytical / Application Questions

1. A sales division consistently meets its targets, but customer complaints and employee turnover are increasing. Apply the six-element ethical culture framework to diagnose the problem.

2. An employee reports that a senior manager altered safety data. Design an investigation and retaliation-prevention process that protects fairness, evidence, and organizational learning.

3. A board observes that misconduct reports have fallen sharply after a restructuring. Develop competing interpretations of the trend and identify the evidence needed to determine whether culture has improved or employees have become less willing to speak up.

22. Multiple Choice Questions with Answers

Question 1

Which situation best illustrates normalization of deviance?

A. An employee refuses an unlawful instruction and reports it

B. A temporary control exception is repeatedly used until it is treated as normal

C. A board reviews an annual ethics report

D. A company updates its code after a regulatory change

Correct Answer: B. A temporary control exception is repeatedly used until it is treated as normal

Question 2

Why may a low number of hotline reports fail to demonstrate a healthy ethical culture?

A. Reports are always inaccurate

B. Employees may lack trust in the reporting system or fear retaliation

C. A hotline can only receive financial complaints

D. Low reporting automatically proves effective prevention

Correct Answer: B. Employees may lack trust in the reporting system or fear retaliation

Question 3

Which incentive design is most likely to support integrity?

A. Rewarding revenue regardless of customer outcomes

B. Tying all compensation to short-term share price

C. Combining performance results with conduct and process measures

D. Removing all performance targets

Correct Answer: C. Combining performance results with conduct and process measures

Question 4

Which response best addresses a report involving a senior executive?

A. Allow the executive to select the investigator

B. Close the report because senior leaders are presumed reliable

C. Use independent oversight and assess conflicts before investigation

D. Publicize the allegation before gathering evidence

Correct Answer: C. Use independent oversight and assess conflicts before investigation

Question 5

A manager excludes a reporting employee from important meetings but gives no formal punishment. This may represent:

A. Procedural fairness

B. Subtle retaliation

C. Ethical fading prevention

D. A malus arrangement

Correct Answer: B. Subtle retaliation

Question 6

Which statement best distinguishes integrity from compliance?

A. Integrity concerns only financial reporting

B. Compliance is broader than ethics

C. Integrity concerns alignment between commitments and conduct, including beyond legal minimums

D. Integrity eliminates the need for policies

Correct Answer: C. Integrity concerns alignment between commitments and conduct, including beyond legal minimums

Question 7

Which practice is most effective for reducing groupthink in important decisions?

A. Discouraging dissent to preserve speed

B. Using independent review or structured red-team analysis

C. Allowing only the most senior person to speak

D. Evaluating decisions only after outcomes are known

Correct Answer: B. Using independent review or structured red-team analysis

Question 8

What should an investigation examine in addition to individual responsibility?

A. Only the personal motives of the reporter

B. Enabling conditions such as targets, controls, and supervision

C. The organization’s public image alone

D. Whether the allegation was convenient for management

Correct Answer: B. Enabling conditions such as targets, controls, and supervision

Question 9

What is a principal risk of using AI to classify ethics reports?

A. It makes all reports legally invalid

B. It may encode bias or misclassify culturally specific concerns

C. It prevents organizations from retaining records

D. It guarantees complete confidentiality

Correct Answer: B. It may encode bias or misclassify culturally specific concerns

Question 10

Which board question best tests for normalization of deviance?

A. How many pages does the code contain?

B. How many employees completed training?

C. What practices have drifted from intended standards, and why?

D. How many values appear in the mission statement?

Correct Answer: C. What practices have drifted from intended standards, and why?