14. Ethics, Sustainability, and Responsible Digital Governance

Introduction and Context

Information technology is no longer merely an organizational support function. Digital infrastructures determine how people communicate, work, receive public services, access finance, exercise political rights, and participate in social life. Consequently, decisions about platforms, data, artificial intelligence, cybersecurity, cloud computing, and digital identity have consequences that extend beyond organizational performance. They affect autonomy, equality, privacy, democratic participation, ecological systems, and the interests of future generations.

Strategic planning and governance therefore cannot be reduced to selecting technologies, controlling budgets, or ensuring regulatory compliance. Responsible digital governance asks a broader question: how should digital capabilities be designed, deployed, and controlled so that they create legitimate public and organizational value without transferring unreasonable risks to less powerful stakeholders? This question is particularly significant at doctoral level because many digital harms are not caused by a single technical failure. They emerge from institutional incentives, business models, supply chains, professional cultures, legal gaps, and assumptions embedded in data and systems.

This chapter examines digital rights, surveillance, accessibility, inclusion, professional responsibility, environmental impacts, green IT, environmental, social and governance (ESG) obligations, and the tensions among innovation, profitability, public interest, and intergenerational accountability. It treats governance as an ethical and strategic practice rather than as a collection of compliance procedures.

Learning Objectives

After studying this chapter, the reader should be able to:

1. Explain the relationship between digital governance, human rights, professional ethics, and organizational strategy.

2. Critically evaluate privacy, surveillance, algorithmic decision-making, accessibility, and digital inclusion.

3. Apply ethical theories and governance frameworks to complex technology decisions.

4. Assess the environmental and social consequences of digital infrastructures and formulate green IT strategies.

5. Interpret ESG obligations and distinguish substantive accountability from symbolic compliance.

6. Analyze trade-offs among innovation, profitability, public interest, and intergenerational justice.

7. Design governance mechanisms that support responsible innovation, assurance, transparency, and remedy.

From IT Governance to Responsible Digital Governance

Traditional IT governance focuses on decision rights, accountability, alignment with organizational strategy, risk management, and the effective use of resources. These remain necessary, but they are insufficient when digital systems influence rights and social outcomes. Responsible digital governance adds questions of legitimacy, fairness, explainability, sustainability, participation, and remedy.

A useful distinction is between instrumental governance and constitutive governance. Instrumental governance treats technology as a means for achieving predetermined organizational objectives. Constitutive governance recognizes that technology also shapes the objectives themselves: a digital platform can redefine what counts as work, a ranking system can influence professional status, and an automated eligibility tool can change the practical meaning of access to public services. Technology does not simply implement policy; it can become policy in operational form.

Responsible governance is therefore concerned with at least five forms of accountability:

• Answerability: the ability to explain who made a decision, on what basis, and with what evidence.
• Enforceability: the existence of consequences when duties are breached.
• Contestability: the capacity of affected people to challenge decisions or data practices.
• Remedial accountability: access to correction, compensation, restoration, or other forms of remedy.
• Forward-looking responsibility: the duty to anticipate and reduce foreseeable future harms.

These dimensions expose a common weakness in organizational practice: responsibility is often assigned to a system, vendor, or algorithm rather than to identifiable decision-makers. A system may be described as producing an outcome, but systems do not possess legal or moral agency. Boards, executives, product owners, engineers, procurement officers, regulators, and professional advisers retain responsibility for choices about objectives, data, controls, deployment, and monitoring.

Digital Rights and the Ethics of Data Power

Digital rights are the rights and freedoms exercised in digital environments or affected by digital systems. They include privacy, freedom of expression, access to information, due process, equality, security, participation, and control over personal data. Digital rights are not unlimited. Privacy, for example, may be balanced against legitimate public interests, but restrictions should be lawful, necessary, proportionate, transparent, and subject to independent oversight.

Privacy, autonomy, and data governance

Privacy is more than secrecy. It includes control over personal information, freedom from inappropriate observation, contextual integrity, and the ability to develop beliefs and relationships without undue monitoring. Data protection practices should therefore address the entire information life cycle: collection, inference, storage, use, sharing, retention, deletion, and secondary use.

Several principles are strategically important:

• Purpose limitation: data should be collected and used for specified legitimate purposes.
• Data minimization: organizations should avoid collecting information merely because future use is conceivable.
• Proportionality: the intrusiveness of processing should be justified by its benefits and necessity.
• Security and confidentiality: technical and organizational safeguards should correspond to risk.
• Transparency: affected people should receive understandable information about material data practices.
• Agency and remedy: individuals should have meaningful ways to access, correct, object to, or challenge relevant processing.

Consent is often treated as the central solution to privacy concerns, yet consent may be weak where services are essential, interfaces are confusing, or individuals lack realistic alternatives. Responsible governance therefore combines consent with legal duties, institutional controls, privacy engineering, and independent review.

Surveillance and power asymmetry

Digital surveillance includes the systematic observation, recording, analysis, or prediction of behavior. It may support cybersecurity, fraud detection, safety, or service improvement. It may also chill expression, discriminate against groups, intensify workplace control, and normalize continuous observation.

A surveillance assessment should ask: Who is observed? What is the purpose? What inferences are made? Who can access the results? How long are records retained? Can the subject challenge an error? Is there a less intrusive alternative? Are affected communities represented in the decision? These questions shift attention from whether surveillance is technically possible to whether it is legitimate.

The central ethical issue is frequently not surveillance alone but asymmetry. Organizations may know extensive details about individuals while individuals know little about organizational decision processes. Responsible governance attempts to reduce this asymmetry through transparency, access rights, oversight, auditability, and limits on function creep.

Automated decision-making and algorithmic justice

Algorithmic systems can reproduce historical inequality, encode questionable classifications, or create new forms of exclusion even when they do not explicitly use protected characteristics. Bias can arise from sampling, labels, proxy variables, measurement choices, optimization targets, deployment context, or unequal error costs.

Fairness cannot be reduced to one statistical metric. Different fairness criteria may conflict, and a mathematically balanced error rate may still be unacceptable if the underlying decision should not be automated. Governance should therefore combine quantitative testing with domain expertise, stakeholder participation, impact assessment, documentation, human review, and post-deployment monitoring.

Explainability also requires care. A technical explanation of model features may not answer the practical question of why a person was denied a service or how the decision can be challenged. Meaningful explanation should be appropriate to the audience, disclose material factors and limitations, and support correction and appeal.

Inclusion, Accessibility, and Digital Justice

Digital inclusion concerns more than internet access. It includes affordability, connectivity, appropriate devices, digital skills, language, cultural relevance, safety, accessibility, and the confidence to use services. A service that is technically available but unusable by people with disabilities, low literacy, limited connectivity, or insecure housing is not genuinely inclusive.

Accessibility is both an ethical obligation and a design discipline. It requires systems and content to be usable by people with diverse sensory, cognitive, physical, and communication needs. Accessibility should be built into procurement requirements, architecture, user research, testing, content design, and service measurement rather than added after development.

Inclusive governance also requires attention to participation. Communities affected by digital systems should not be treated only as sources of data or recipients of decisions. Participatory design, representative consultation, community review boards, and accessible complaint channels can reveal harms that technical teams overlook. Participation, however, must not become symbolic. Organizations should explain how input influenced decisions and provide reasons when recommendations were rejected.

The concept of digital justice extends inclusion by examining distribution, recognition, participation, and repair. It asks who benefits from digital transformation, who bears its costs, whose knowledge is represented, and what happens when harm occurs. This perspective is especially important where automated systems affect welfare, employment, education, health, immigration, policing, or credit.

Professional Responsibility and Ethical Decision-Making

Professional responsibility arises from the foreseeable effects of technical work. Codes of professional conduct commonly emphasize public safety, competence, honesty, confidentiality, avoidance of conflicts of interest, respect for privacy, and the obligation to report serious risks. A code is not a substitute for judgment, but it establishes minimum expectations when commercial pressure conflicts with public interest.

Ethical decisions can be analyzed through several complementary theories:

• Consequentialism evaluates likely benefits and harms, including their distribution.
• Deontological ethics emphasizes duties, rights, and constraints that should not be violated merely to achieve desirable outcomes.
• Virtue ethics asks what a responsible professional or institution would do, emphasizing integrity, courage, humility, and practical wisdom.
• Justice theories examine fairness in distribution, recognition, procedure, and opportunity.
• Care ethics highlights relationships, vulnerability, dependency, and responsibilities to those who may not have effective power.
• The precautionary principle supports preventive action where serious or irreversible harm is plausible despite uncertainty.

In practice, ethical analysis should not consist of selecting one theory mechanically. A governance committee might identify affected stakeholders, assess consequences, identify rights and duties, examine distributive effects, consider vulnerability, and document uncertainties. The result should include not only a decision but also conditions, monitoring requirements, escalation thresholds, and remedies.

A recurring professional failure is the diffusion of responsibility. Product teams may assume that legal approval makes a system ethical; legal teams may assume that technical controls make it safe; executives may assume that vendors carry the risk. Responsible practice rejects these assumptions. Accountability must be allocated across the life cycle and supported by authority, resources, and escalation channels.

Sustainability and the Materiality of Digital Technology

Digital systems depend on physical infrastructures: data centers, networks, devices, minerals, electricity, water, buildings, logistics, and labor. Their environmental impact includes energy consumption, greenhouse-gas emissions, water use, land use, extraction of critical minerals, electronic waste, and pollution associated with manufacturing and disposal. Digitalization can reduce environmental impact in some domains through optimization, dematerialization, remote collaboration, and intelligent control, but efficiency gains may be offset by increased demand—a phenomenon often called rebound.

Environmental assessment should consider the full life cycle rather than only operational electricity use. A life-cycle perspective includes raw-material extraction, component manufacturing, transportation, use, repair, reuse, recycling, and disposal. It also considers whether a digital solution creates additional consumption or merely shifts impacts to suppliers and communities.

Green IT and Green IS

Green IT concentrates on reducing the environmental impact of technology itself. Measures include energy-efficient hardware, server utilization, virtualization, renewable electricity, cooling optimization, device longevity, responsible procurement, and e-waste management. Green information systems take a wider view: they use digital capabilities to reduce environmental impacts in other activities, such as logistics, energy management, agriculture, manufacturing, and buildings.

A credible sustainability strategy should establish a baseline, identify material sources of impact, set measurable targets, assign ownership, and report progress using consistent boundaries. Useful indicators may include energy intensity, emissions by scope, water use, device life span, repair rates, supplier performance, renewable-energy share, and e-waste recovery. Metrics require methodological transparency because apparently favorable results can be produced by changing organizational boundaries or excluding upstream impacts.

Digital sustainability also includes social durability. A system that saves energy while increasing worker exploitation, surveillance, or exclusion cannot be considered fully responsible. Environmental, social, and governance dimensions are interconnected rather than separate reporting categories.

ESG Obligations and the Risk of Symbolic Compliance

ESG frameworks encourage organizations to disclose and manage environmental, social, and governance risks relevant to stakeholders and long-term value. ESG may improve board attention, investor information, supply-chain scrutiny, and strategic integration. However, ESG reporting can become a reputational exercise if organizations select favorable indicators, rely on vague commitments, or treat disclosure as a substitute for performance.

Good ESG governance requires materiality analysis, reliable data ownership, internal controls, independent assurance where appropriate, and clear links between targets, capital allocation, executive incentives, and operational decisions. Digital functions contribute directly: they produce ESG data, operate material infrastructures, support reporting controls, and create social risks through platforms and algorithms.

Two forms of materiality are useful. Financial materiality considers how sustainability issues affect organizational value. Impact materiality considers how organizational activities affect people and the environment. A mature governance system examines both. A practice may be financially beneficial in the short term while imposing substantial social or ecological costs that eventually create legal, reputational, operational, or legitimacy risks.

A Governance Architecture for Responsible Digital Transformation

Organizations require a governance architecture that connects principles with decisions. One practical architecture has six interacting elements.

First, the board and executive team establish a purpose statement, risk appetite, rights commitments, and sustainability objectives. Second, a cross-functional digital responsibility committee reviews high-impact initiatives. Third, project teams conduct privacy, human-rights, algorithmic, accessibility, and environmental impact assessments according to the context. Fourth, procurement and vendor governance extend requirements across the supply chain. Fifth, independent assurance tests controls, data quality, model performance, accessibility, emissions claims, and incident readiness. Sixth, monitoring and remedy mechanisms continue after deployment.

A risk-tiered approach is preferable to identical controls for every system. A low-impact internal tool may need basic documentation and security review. A system affecting employment, health, education, financial access, or liberty requires stronger evidence, meaningful human oversight, stakeholder consultation, independent testing, and an appeal process.

Documentation should be usable rather than ceremonial. Important artifacts may include a system purpose statement, data inventory, stakeholder map, impact assessment, model or architecture documentation, decision log, testing results, residual-risk register, procurement clauses, incident plan, and retirement criteria. Governance should also address decommissioning. Removing a harmful or obsolete system is sometimes more responsible than attempting indefinite remediation.

Innovation, Profitability, Public Interest, and Intergenerational Accountability

Responsible governance does not imply opposition to innovation or profitability. It challenges narrow definitions of both. Innovation that creates avoidable rights violations may generate short-term revenue but undermine trust and institutional legitimacy. Conversely, privacy-preserving design, accessible services, efficient infrastructures, and trustworthy automation can create durable value.

Trade-offs should be made explicit. For example, extensive data collection may improve personalization but increase privacy risk; rapid deployment may create early market advantage but reduce testing; automation may lower costs but eliminate meaningful human discretion; high-performance computing may support scientific discovery while increasing energy and water demand. The existence of a trade-off does not make all choices equally acceptable. Some rights and ecological thresholds function as constraints rather than variables to be optimized freely.

Intergenerational accountability adds a temporal dimension. Current decision-makers may enjoy benefits while future communities inherit emissions, degraded ecosystems, technical debt, inaccessible infrastructure, or institutional dependence on harmful systems. The principle of intergenerational justice therefore supports long-term impact assessment, precaution concerning irreversible harm, durable records, maintainability, and investment in public digital infrastructure.

Illustrative Case: The Welfare Eligibility Platform

Background

The following fictional case illustrates the governance tensions discussed in this chapter. A national welfare agency introduces an automated platform to identify potentially ineligible applicants and prioritize investigations. The system combines application information with administrative records and predictive indicators supplied by a commercial analytics vendor.

Situation and problem

The agency reports faster processing and reduced administrative cost. Within a year, advocacy organizations observe that applicants with unstable housing, irregular employment, limited language proficiency, and disabilities are referred for investigation at unusually high rates. Applicants receive generic notices and have difficulty understanding or challenging decisions. The vendor claims that its model is proprietary and declines to disclose detailed feature information. The agency’s contract focuses on accuracy and savings but contains limited requirements for accessibility, bias testing, environmental reporting, or independent audit.

Analysis

The system raises several issues. Privacy risks arise from data linkage and secondary use. Fairness concerns arise from proxy variables and unequal error costs. Due process is weakened when people cannot obtain a meaningful explanation or timely review. The proprietary claim conflicts with the public need for accountability, even if full publication of source code is unnecessary. Accessibility failures make formal appeal rights ineffective. The agency also lacks evidence that the model’s efficiency benefits outweigh the social costs of false accusations and delayed support.

The case demonstrates why accuracy alone is inadequate. A model can be statistically accurate in aggregate while producing unacceptable harms for particular groups. It also illustrates institutional responsibility: the vendor is not the sole accountable actor because the agency selected the purpose, data, contract, deployment context, and review process.

Governance approach

The agency suspends automatic adverse decisions and uses the system only as a triage aid pending review. It establishes an independent oversight panel including legal, technical, social-service, accessibility, and community representatives. The agency conducts an impact assessment, tests subgroup error patterns, improves notices, provides human review, creates an accessible appeal process, and requires the vendor to disclose sufficient information for audit. Contract amendments establish audit rights, data minimization, retention limits, security obligations, incident reporting, and remedies for non-performance.

The agency also evaluates whether the prediction objective is appropriate. Rather than predicting alleged ineligibility, it considers whether analytics could identify applicants who need additional assistance completing forms. This reframing illustrates responsible innovation: the same technical capability can be directed toward support rather than intensified surveillance.

Outcome and learning points

The revised program operates more slowly but produces better documented decisions and fewer unresolved complaints. Some anticipated savings disappear, but institutional legitimacy improves. The agency establishes periodic review and a sunset clause requiring evidence before expansion.

The principal lessons are that purpose determines ethical direction; rights require practical remedy; procurement is a governance instrument; affected communities possess relevant knowledge; and efficiency must be evaluated alongside social costs and public value.

Challenges, Limitations, and Common Mistakes

Responsible digital governance faces structural difficulties. Ethical impacts may be uncertain, indirect, or distributed across many actors. Organizations may lack reliable emissions data, representative test populations, or resources for independent review. Global supply chains complicate accountability, while legal standards differ across jurisdictions. Small organizations may struggle to implement elaborate frameworks, and large organizations may create extensive documentation without changing decisions.

Common mistakes include treating compliance as equivalent to ethics, relying on consent in situations of dependency, assuming that anonymization eliminates all re-identification risk, using a single fairness metric, consulting stakeholders only after a design is fixed, ignoring downstream environmental impacts, and assigning responsibility to a vendor or algorithm. Another mistake is assuming that a human in the loop automatically makes an automated decision legitimate. Human review can be nominal, rushed, or influenced by automation bias.

Governance can also fail through metric fixation. Targets such as reduced energy intensity or fewer complaints may improve while absolute impacts or unreported harms increase. Metrics should therefore be accompanied by qualitative evidence, independent challenge, and attention to distributional effects.

Current Developments and Emerging Directions

Several developments are reshaping responsible digital governance. Generative AI has intensified concerns about copyright, misinformation, privacy, labor displacement, hallucination, and accountability for automated content. Privacy-enhancing technologies, including federated learning, secure computation, and differential privacy, offer ways to reduce exposure but introduce technical and governance trade-offs. Algorithm registers, model cards, data documentation, and assurance standards are becoming more common, although their effectiveness depends on completeness and institutional independence.

Climate concerns are also changing digital strategy. Organizations are examining the energy and water demands of large-scale computing, the carbon implications of AI model training and inference, and the durability of hardware supply chains. Digital product passports, circular-economy practices, repairability, and responsible mineral sourcing may improve life-cycle accountability.

A further trend is the movement from voluntary principles toward enforceable duties, sectoral regulation, procurement standards, and auditable management systems. This development is valuable but cannot eliminate judgment. Rules may lag behind technical change, and compliance may still be superficial. The strategic task is to combine legal compliance with a culture capable of recognizing harms before they become formal violations.

Best Practices for Responsible Digital Governance

Organizations seeking practical improvement should:

1. Define public and organizational value before selecting technology.

2. Map affected stakeholders, including people with limited power or representation.

3. Classify systems by impact and apply proportionate review.

4. Integrate privacy, accessibility, security, human rights, and environmental criteria into procurement and design.

5. Establish clear ownership, escalation rights, audit access, and post-deployment monitoring.

6. Test outcomes across relevant populations and investigate unequal error costs.

7. Provide understandable explanations, accessible appeal routes, and meaningful remedies.

8. Measure environmental impacts across the life cycle and address absolute as well as relative reductions.

9. Link ESG claims to evidence, controls, incentives, and independent assurance.

10. Record uncertainty, dissent, residual risk, and the conditions under which a system will be paused or retired.

Chapter Summary

Responsible digital governance extends IT governance by incorporating rights, fairness, accessibility, participation, sustainability, professional responsibility, and remedy. Digital systems exercise power through data collection, surveillance, classification, automation, and infrastructure. Their governance must therefore address not only efficiency and security but also autonomy, equality, public legitimacy, and intergenerational effects.

Ethical theories provide complementary ways to examine consequences, duties, justice, vulnerability, and precaution. Privacy and algorithmic fairness require more than consent or a single statistical test. Inclusion requires accessible services, meaningful participation, and attention to social conditions. Green IT addresses the environmental impact of technology, while green information systems use digital capabilities to improve wider environmental performance. ESG governance is credible only when disclosures are supported by materiality analysis, controls, evidence, and accountability.

The central strategic lesson is that innovation, profitability, and public interest should not be treated as permanently opposed. Responsible governance makes trade-offs visible, establishes non-negotiable protections, distributes accountability, and creates conditions for durable innovation. It also recognizes that organizations owe duties to people who are not yet customers, employees, voters, or stakeholders: future generations who will inherit the consequences of present digital choices.

Key Terms

Digital rights: Human rights and freedoms exercised in or affected by digital environments.

Responsible digital governance: Governance that integrates organizational performance with rights, ethics, sustainability, accountability, and public interest.

Privacy: Control over personal information and protection from inappropriate observation or interference.

Purpose limitation: Restricting data use to specified, legitimate purposes.

Data minimization: Collecting and retaining only data reasonably necessary for an identified purpose.

Surveillance: Systematic observation, recording, analysis, or prediction of behavior.

Algorithmic justice: The fair and accountable treatment of people affected by computational decision systems.

Explainability: The provision of understandable reasons for system outputs and decisions.

Contestability: The ability of affected people to challenge a decision or data practice.

Digital inclusion: Meaningful access to digital services, including affordability, skills, accessibility, and relevance.

Accessibility: Designing technology so that people with diverse abilities can use it effectively.

Green IT: Reducing the environmental impact of technology infrastructure and equipment.

Green information systems: Using information systems to reduce environmental impacts in broader activities.

Life-cycle assessment: Evaluation of impacts from resource extraction through production, use, and disposal.

Rebound effect: Increased consumption that offsets some benefits gained from efficiency improvements.

ESG: Environmental, social, and governance factors used to assess organizational impacts and risks.

Impact materiality: Assessment of how an organization affects people and the environment.

Precautionary principle: Taking preventive action when serious harm is plausible despite uncertainty.

Intergenerational justice: Fairness between present populations and future generations.

Remedial accountability: Responsibility to provide correction, compensation, restoration, or other remedy after harm.

Review Questions

Short Answer Questions

1. How does responsible digital governance extend traditional IT governance?

2. Why is consent alone insufficient as a privacy safeguard in some digital services?

3. Distinguish green IT from green information systems.

4. What is meant by contestability in automated decision-making?

5. Why should environmental impacts be assessed across the technology life cycle?

Long Answer Questions

1. Critically evaluate the relationship between digital rights, surveillance, and organizational power.

2. Explain how ethical theories can support governance decisions involving algorithmic systems.

3. Discuss the role of accessibility, participation, and digital justice in public-sector technology.

4. Analyze how ESG governance can become symbolic and propose mechanisms for substantive accountability.

5. Examine the tensions among innovation, profitability, public interest, and intergenerational justice.

Analytical / Application Questions

1. An employer proposes continuous productivity monitoring using cameras, keystroke records, and predictive analytics. Develop a proportionality and governance assessment, including possible alternatives and remedies.

2. A university plans to deploy a generative AI system for student assessment. Design a risk-tiered governance process addressing privacy, fairness, accessibility, academic integrity, environmental impact, and appeal rights.

3. A cloud provider reports a 30 percent reduction in energy intensity while total computing demand doubles. Analyze whether this represents meaningful sustainability progress and identify the additional evidence required.

22. Multiple Choice Questions with Answers

Question 1

Which feature most clearly distinguishes responsible digital governance from narrow IT governance?

A. It focuses exclusively on reducing technology costs.

B. It integrates rights, sustainability, legitimacy, and remedy with performance objectives.

C. It delegates all technology decisions to external vendors.

D. It replaces organizational strategy with technical experimentation.

Correct Answer: B. It integrates rights, sustainability, legitimacy, and remedy with performance objectives.

Question 2

Why is consent alone often insufficient for privacy governance?

A. Consent eliminates the need for security controls.

B. Individuals always understand complex data practices before agreeing.

C. People may lack realistic alternatives or meaningful understanding in essential services.

D. Consent is legally prohibited in all digital environments.

Correct Answer: C. People may lack realistic alternatives or meaningful understanding in essential services.

Question 3

Which question is most directly relevant to assessing surveillance proportionality?

A. Does the system use the newest available processor?

B. Can the organization collect even more data later?

C. Is there a less intrusive means of achieving the legitimate objective?

D. Will surveillance increase the number of software features?

Correct Answer: C. Is there a less intrusive means of achieving the legitimate objective?

Question 4

A model has equal overall accuracy across two groups but produces substantially more harmful false positives for one group. What is the best governance conclusion?

A. The model is automatically fair because aggregate accuracy is equal.

B. The unequal error consequences require further fairness and impact analysis.

C. The model should be deployed without human review.

D. Accuracy is irrelevant to all algorithmic decisions.

Correct Answer: B. The unequal error consequences require further fairness and impact analysis.

Question 5

Which practice best supports meaningful contestability?

A. Providing a generic notice that an algorithm was used.

B. Allowing affected people to obtain understandable reasons and request review.

C. Keeping all decision criteria secret from auditors and users.

D. Removing human review to improve efficiency.

Correct Answer: B. Allowing affected people to obtain understandable reasons and request review.

Question 6

What is the principal distinction between green IT and green information systems?

A. Green IT addresses technology impacts, while green information systems use technology to improve wider environmental performance.

B. Green IT applies only to software, while green information systems apply only to hardware.

C. Green IT concerns social issues, while green information systems concern legal issues.

D. There is no meaningful distinction between them.

Correct Answer: A. Green IT addresses technology impacts, while green information systems use technology to improve wider environmental performance.

Question 7

Why can a reduction in energy intensity fail to demonstrate absolute environmental improvement?

A. Intensity measures can decline while total demand and total impacts increase.

B. Energy intensity is always unrelated to computing activity.

C. Absolute impacts are never relevant to sustainability governance.

D. Efficiency improvements necessarily eliminate rebound effects.

Correct Answer: A. Intensity measures can decline while total demand and total impacts increase.

Question 8

In the welfare eligibility case, why was the agency still accountable even though a vendor supplied the model?

A. Vendors cannot provide any technical services to public agencies.

B. The agency selected the purpose, data, contract, and deployment context.

C. Accountability automatically transfers to the model developer.

D. Public agencies are exempt from algorithmic accountability.

Correct Answer: B. The agency selected the purpose, data, contract, and deployment context.

Question 9

Which practice is most likely to indicate substantive ESG governance rather than symbolic reporting?

A. Publishing broad commitments without baselines or owners.

B. Selecting only favorable indicators for public disclosure.

C. Linking material targets to evidence, controls, incentives, and assurance.

D. Treating disclosure as a substitute for operational change.

Correct Answer: C. Linking material targets to evidence, controls, incentives, and assurance.

Question 10

What does intergenerational accountability require in digital strategy?

A. Prioritizing short-term returns regardless of future consequences.

B. Considering long-term impacts, irreversible harms, maintainability, and future stakeholders.

C. Avoiding all technological innovation.

D. Measuring only current customer satisfaction.

Correct Answer: B. Considering long-term impacts, irreversible harms, maintainability, and future stakeholders.