Navigate the complex ethical landscape of aerospace and defense. From engineering integrity to export controls, from procurement ethics to responsible AI -- build the ethical foundation that protects lives, programs, and national security.
"The right to do something does not mean that doing it is right."
-- William Safire
Module 00 -- Overview
Why Ethics Matter in Aerospace & Defense
The aerospace and defense industry operates at the intersection of technology, national security, and public trust. Ethical failures in this domain do not just damage reputations -- they cost lives, compromise national security, and erode democratic oversight.
💪
The Stakes Are Higher
Why A&D Ethics Are Unique
Defense systems operate in life-and-death environments. A quality shortcut on a commercial product may cause inconvenience; the same shortcut on a weapons system can cause casualties.
Military personnel trust that the systems they operate will perform as designed
Civilian populations trust that weapons will discriminate between combatants and non-combatants
Taxpayers trust that public funds are spent responsibly and honestly
Allied nations trust that shared technology will be protected and used as agreed
Click to expand
📑
The Regulatory Framework
Laws, Regulations & Standards
Defense ethics are governed by an overlapping framework of federal law, agency regulations, professional standards, and contractual requirements.
DoD Regulations: DFARS, NISPOM, DoD Directive 5500.07 (Standards of Conduct)
Professional Codes: NSPE Code of Ethics, IEEE Code of Ethics, INCOSE ethical standards
Contractual: Company codes of conduct, contractor business ethics compliance programs (FAR 52.203-13)
Click to expand
⚠️
Consequences of Failure
Personal, Corporate & National
Ethics violations carry consequences at every level -- criminal prosecution for individuals, debarment for companies, and strategic damage to national security.
Individual: Criminal prosecution, civil liability, loss of security clearance, professional license revocation, career destruction
Corporate: Debarment from government contracting, False Claims Act treble damages, stock price collapse, loss of public trust
National: Technology compromise, loss of military advantage, alliance damage, erosion of democratic oversight
Examples: Boeing 737 MAX ($20B+ total cost), Fat Leonard scandal (Navy), Textron cluster munitions ($100M+ settlement)
Three landmark case studies that reshaped how engineers think about professional responsibility, organizational pressure, and the duty to protect public safety.
🚀
Space Shuttle Challenger
O-Ring Decision -- January 28, 1986
Engineers at Morton Thiokol warned against launching in cold temperatures, but management overrode their concerns. Seven crew members lost their lives 73 seconds after launch.
What Happened
Evening Before Launch
Engineer Roger Boisjoly presented data showing O-ring erosion in cold temperatures and recommended postponing launch until temperature reached 53 degrees F.
Management Override
NASA challenged the recommendation. Thiokol management reversed the engineering decision after being told to "take off your engineering hat and put on your management hat."
Launch Day -- 36 degrees F
Shuttle launched at 36 degrees F. O-rings failed to seal the solid rocket booster joint. Hot gases burned through the external tank, causing structural failure at T+73 seconds.
Root Cause Analysis
Normalization of deviance -- previous O-ring erosion was accepted as within safety margins
Schedule pressure overrode engineering judgment
Communication failure between engineering and management decision-makers
Burden of proof was reversed -- engineers had to prove it was unsafe rather than prove it was safe
Lessons Learned
Engineers have a paramount duty to protect public safety
Dissenting technical opinions must be heard at the highest levels
The burden of proof must always be on demonstrating safety, not on proving danger
Discussion Questions
How should an engineer escalate safety concerns when management disagrees?
What organizational structures could have prevented this outcome?
When does loyalty to an employer end and duty to public safety begin?
Click to expand full case study
✈️
Boeing 737 MAX MCAS
Design & Certification Failures -- 2018-2019
The Maneuvering Characteristics Augmentation System relied on a single angle-of-attack sensor with no redundancy. 346 people died in two crashes (Lion Air 610 and Ethiopian 302).
What Happened
Design Phase
MCAS was created to compensate for aerodynamic changes from larger engines. It relied on a single AoA sensor and could command aggressive nose-down trim without pilot awareness.
Certification
Boeing classified MCAS as a minor system change to avoid additional pilot training requirements. FAA delegated much of the certification to Boeing itself.
October 29, 2018
Lion Air Flight 610 crashed into the Java Sea 13 minutes after takeoff. A faulty AoA sensor triggered MCAS repeatedly, and the crew could not overcome the nose-down commands. 189 fatalities.
March 10, 2019
Ethiopian Airlines Flight 302 crashed 6 minutes after takeoff under nearly identical circumstances. 157 fatalities. Worldwide 737 MAX grounding followed.
Root Cause Analysis
Single point of failure -- MCAS relied on one AoA sensor with no cross-check or redundancy
Schedule and cost pressure led to design compromises to avoid pilot retraining
Regulatory capture -- FAA delegated oversight to the entity being regulated
Organizational silence -- internal concerns about MCAS were not escalated effectively
Lessons Learned
Safety-critical systems must never have single points of failure
Regulatory independence is essential for effective oversight
Transparency with pilots and operators about system behavior is non-negotiable
Discussion Questions
How should the relationship between manufacturers and regulators be structured?
At what point does cost optimization become an ethical failure?
What responsibility do individual engineers bear within a flawed organizational culture?
Click to expand full case study
☢️
Therac-25 Radiation Overdose
Software Safety Failure -- 1985-1987
A radiation therapy machine delivered lethal doses due to software race conditions and inadequate testing. Six patients received massive overdoses; three died. One of the most studied cases in software engineering ethics.
What Happened
Design Decision
Therac-25 removed hardware safety interlocks present in earlier models (Therac-6 and Therac-20), relying entirely on software for safety controls.
Software Defect
A race condition in the software allowed the machine to fire the high-energy electron beam without the beam-spreading foil in place, delivering 100 times the intended dose.
1985-1987 Incidents
Six patients at four facilities received massive radiation overdoses. Patients reported burning sensations. The manufacturer initially dismissed operator error and took months to acknowledge the software defect.
Root Cause Analysis
Over-reliance on software with no independent hardware safety interlocks
Race condition bug existed in reused code that was never formally tested
Error messages were cryptic and did not halt machine operation
Manufacturer dismissed early incident reports and blamed operators
Lessons Learned
Software alone must never be the sole safety mechanism for life-critical systems
Formal verification and independent safety analysis are essential for safety-critical software
Incident reports must be taken seriously and investigated promptly
Discussion Questions
How should safety-critical software be tested differently from commercial software?
What is the ethical obligation when reusing code in safety-critical applications?
How should organizations respond when incidents are first reported?
Click to expand full case study
Module 02 -- Procurement Ethics
Procurement & Contracting Ethics
Defense procurement operates under strict ethical rules to ensure fair competition, prevent corruption, and maintain public trust. Violations carry severe consequences including criminal penalties.
⚖️
Organizational Conflict of Interest
FAR Subpart 9.5
An OCI exists when a contractor's objectivity or competitive advantage is compromised. Three types: biased ground rules, impaired objectivity, and unequal access to information.
Biased Ground Rules: A contractor that writes a statement of work then bids on the resulting contract has set the rules in its own favor
Impaired Objectivity: A contractor evaluating its own products or those of a competitor while having a financial stake in the outcome
Unequal Access: A contractor gains non-public information through one contract that provides advantage on a different competition
Real-World Scenario
Your company wrote the systems engineering requirements for a new radar system. Now the same company wants to bid as the radar manufacturer. This is a textbook biased ground rules OCI -- you must either decline to bid or obtain a waiver with mitigation plan.
Click to expand
🚪
Revolving Door Restrictions
18 U.S.C. 207 / Post-Employment Rules
Former government officials face cooling-off periods and permanent bans on certain activities to prevent undue influence on their former agencies.
Lifetime Ban: Former officials may never represent another party on a specific matter they personally and substantially participated in
2-Year Cooling Off: Senior officials may not contact their former agency on matters that were pending under their authority
1-Year Ban: Senior officials may not lobby their former agency for one year after leaving
Real-World Scenario
A retired Air Force colonel who oversaw the B-21 program joins a defense contractor 6 months later. She may not contact the Air Force on B-21 matters during her cooling-off period, and is permanently banned from matters she personally decided while in uniform.
Click to expand
📜
Bid Protest Ethics
GAO / Court of Federal Claims
Bid protests are legitimate tools to ensure fair competition, but filing frivolous protests to delay a competitor or gain intelligence crosses ethical lines.
Legitimate Use: Challenging evaluation criteria that were not applied as stated in the solicitation
Ethical Gray Area: Filing a protest primarily to gain access to protected source selection information during the CICA stay
Unethical: Filing protests solely to delay a competitor's contract start, with no genuine belief in the merits of the protest
Real-World Scenario
Your company lost a major competition and internal analysis shows the evaluation was properly conducted. A VP suggests protesting anyway to "buy time to lobby Congress." This is ethically problematic and risks reputational damage with the customer.
Click to expand
🎁
Gift Rules & Thresholds
5 CFR Part 2635 / Procurement Integrity Act
Strict rules govern what government employees can accept. Even small gifts can create the appearance of impropriety and jeopardize both the giver and the receiver.
$20 / $50 Rule: Government employees may accept unsolicited gifts valued at $20 or less per occasion, not exceeding $50 per year from a single source
Widely Attended Gatherings: Attendance at events may be acceptable if the event is open and attendance serves the agency's interest
Meals: Modest refreshments (coffee, donuts) at meetings are generally acceptable; lavish meals are not
Prohibited: Cash gifts are never acceptable regardless of amount. Gifts given with intent to influence official action violate the bribery statute (18 U.S.C. 201)
Real-World Scenario
A contractor invites a Contracting Officer to a $200 dinner to "discuss program status." This violates gift rules. Even if the CO pays their own way, the private setting creates appearance concerns. Schedule meetings in government facilities instead.
Click to expand
🛡️
Contractor-Government Boundaries
Inherently Governmental Functions
Contractors must not perform inherently governmental functions. The line between advisory support and decision-making authority is an ongoing ethical boundary.
Prohibited: Contractors may not make acquisition decisions, obligate government funds, or supervise government employees
Best Practice: Maintain clear documentation of who made decisions vs. who provided analysis
Real-World Scenario
A support contractor has been running the program office for years and effectively makes all technical decisions. The government PM rubber-stamps recommendations. This blurs the line into inherently governmental territory and creates both legal and ethical risks.
Click to expand
Procurement Ethics Quick Reference
📈
Source Selection Information
Procurement Integrity Act -- 41 U.S.C. 2102
Bid prices, evaluation results, and source selection plans are protected. Unauthorized disclosure is a federal crime punishable by 5 years imprisonment and $50,000 fine.
Source selection information includes: bid prices, proposed costs, technical evaluations, rankings, competitive range determinations
Protection applies from solicitation through award -- even after protests
Both the person who discloses AND the person who receives protected information can be prosecuted
Red Flags
A competitor asks about "what the government is looking for" during an active competition
A former government employee shares insights about a pending evaluation on their first day at a contractor
A subcontractor on one team shares cost data with a different prime contractor
Click to expand
💰
Cost Mischarging
False Claims Act -- 31 U.S.C. 3729
Charging labor, materials, or overhead to the wrong contract is one of the most common defense fraud schemes. The False Claims Act provides treble damages and qui tam provisions.
Direct Charging: Charging hours worked on Program A to Program B because B has budget remaining
Overhead Loading: Burying direct costs in overhead pools to avoid exceeding contract ceilings
Material Substitution: Billing for premium materials while delivering cheaper alternatives
Progress Billing Fraud: Billing for milestones not actually completed
Consequences
Treble damages (3x the fraud amount) plus $11,000+ per false claim
Criminal prosecution of individuals involved
Suspension and debarment from all government contracting
Whistleblowers (qui tam relators) receive 15-30% of recovered funds
Click to expand
🤝
Mandatory Disclosure
FAR 52.203-13
Government contractors must maintain ethics compliance programs and disclose violations of federal criminal law, False Claims Act, and significant overpayments. Failure to disclose is itself grounds for suspension.
Contractors must have a written code of business ethics and conduct
Must establish an internal control system to detect criminal conduct
Timely disclosure of violations to the agency OIG is mandatory
Ethics training must be provided to all employees within 90 days of hire and annually thereafter
A hotline or other mechanism must exist for anonymous reporting
Click to expand
Module 03 -- Information Security
Classification & Information Handling
Proper handling of classified and controlled information is both a legal obligation and an ethical responsibility. Understanding classification levels and handling requirements protects national security.
Select a classification level to view handling requirements:
The Need-to-Know Principle
Having a security clearance alone does not grant access to classified information. You must also have a demonstrated need-to-know -- a legitimate requirement for the information in the performance of your official duties.
🔒 SCI / SAP -- Compartmented Access Only
🔐 Top Secret / Secret -- Clearance + Need-to-Know Required
🔑 Confidential / CUI -- Controlled Access
🌐 Unclassified / FOUO -- General Access with Caveats
If classified information is found on an unclassified system (a "spillage"), follow these steps immediately:
✓
STOP -- Do not forward, copy, or print the material
✓
Disconnect the affected system from the network (do NOT power off)
✓
Note the date, time, classification level, and how the spillage was discovered
✓
Notify your Information System Security Officer (ISSO) immediately
✓
Notify your Facility Security Officer (FSO)
✓
Do NOT attempt to delete the material -- forensic analysis may be required
✓
Identify all personnel who may have seen the classified material
✓
Document the incident in writing for the security office
✓
Follow sanitization guidance from the ISSO before reconnecting the system
Classification Marking Quick Reference
Proper marking is the first line of defense in protecting classified information. Every document must be marked to ensure handlers know the required protections.
📄
Document Marking Elements
Required for All Classified Documents
Every classified document requires specific marking elements positioned correctly on the page. Missing or incorrect markings can lead to mishandling.
Banner Lines: Overall classification at top and bottom center of each page (e.g., SECRET)
Portion Marks: Each paragraph, figure, table, and subject line marked with its classification level (e.g., (S), (U), (TS))
Classification Authority Block: On the first page -- identifies who classified it, the reason (1.4 category), and declassification date/event
Downgrade/Declassification: Instructions for when/how the classification level changes over time
Dissemination Controls: Additional restrictions like NOFORN (no foreign nationals), REL TO (releasable to specific countries), ORCON (originator controlled)
Click to expand
💻
Digital Media Marking
Electronic Files, Email & Removable Media
Digital classified information requires markings on the media itself, within the file, and in transmission headers. CUI email requires specific subject line prefixes.
Email: Classification in subject line (e.g., "SECRET // Subject here"). Banner at top and bottom of body text.
Removable Media: External label with highest classification level, date, and POC. SF-706 (TOP SECRET), SF-707 (SECRET), or SF-708 (CONFIDENTIAL) labels required.
File Names: Include classification indicator in the filename when practical (e.g., "briefing_S_20260411.pptx")
Metadata: File properties must include classification markings. Be aware of hidden metadata that could leak classified information into unclassified systems.
Click to expand
🗑️
Destruction Requirements
Proper Disposal by Classification Level
Classified material must be destroyed in a manner that prevents reconstruction. Destruction methods vary by classification level and material type.
CUI: Cross-cut shredding (1mm x 5mm or finer), pulping, or incineration
Confidential/Secret: NSA-approved cross-cut shredder, incineration, or chemical decomposition. Two-person witness for SECRET.
Top Secret: Witnessed destruction by two cleared individuals. NSA-approved methods only. Destruction certificate required and retained for 5 years.
Digital Media: NSA-approved degaussing or physical destruction per NSA/CSS EPL-9-12. Simple deletion is NEVER sufficient for any classified level.
Click to expand
"In matters of security, there are no small mistakes -- only consequences that haven't happened yet."
-- Security Fundamentals Principle
Module 04 -- Export Controls
ITAR/EAR Export Control
Export controls regulate the transfer of defense articles, services, and technical data to foreign persons and entities. Violations carry criminal penalties up to $1M per violation and 20 years imprisonment under ITAR.
🛡️
ITAR Basics
International Traffic in Arms Regulations
ITAR controls defense articles and services on the U.S. Munitions List (USML). Any export requires a license from the State Department's DDTC.
Administered by the Directorate of Defense Trade Controls (DDTC)
Covers items specifically designed or modified for military application
"Export" includes showing technical data to a foreign person, even within the U.S. (deemed export)
No license exceptions -- every export requires specific authorization
Click to expand
🌐
EAR Basics
Export Administration Regulations
EAR controls dual-use items on the Commerce Control List (CCL). More flexible than ITAR, with license exceptions for many items and destinations.
Administered by the Bureau of Industry and Security (BIS)
Covers commercial items with potential military applications (dual-use)
Uses Export Control Classification Numbers (ECCNs) for categorization
License exceptions available based on item, destination, and end-use
Click to expand
🔍
Deemed Exports
The Most Common Violation
A "deemed export" occurs when controlled technology is released to a foreign national within the United States. This is the most frequently cited export control violation in the defense industry.
Showing a technical drawing to a foreign national employee at your U.S. facility is an export to their home country
Allowing a foreign visitor to observe controlled manufacturing processes constitutes an export
Technology Control Plans (TCPs) are required to manage foreign national access at cleared facilities
Visual access to controlled hardware in a lab or factory floor must be restricted from foreign nationals without a license
"Fundamental research" at universities may be excluded, but only if published without restriction
Click to expand
📝
Voluntary Self-Disclosure
When Violations Are Discovered
When an export control violation is discovered, voluntary self-disclosure to the appropriate agency (DDTC for ITAR, BIS for EAR) is strongly recommended and typically results in significantly reduced penalties.
DDTC strongly encourages VSDs and considers disclosure as a mitigating factor in enforcement actions
VSDs should include: what was exported, to whom, when, how the violation was discovered, and what corrective actions have been taken
Penalties for disclosed violations are typically 50-75% lower than for violations discovered by the government
Failure to disclose a known violation can be treated as a willful violation, carrying criminal rather than civil penalties
Click to expand
🌐
Sanctions & Embargoes
OFAC & Country-Specific Restrictions
Beyond ITAR/EAR, OFAC sanctions prohibit transactions with specific countries, entities, and individuals. Sanctions compliance intersects with export controls but involves separate legal frameworks.
Comprehensively Sanctioned: Cuba, Iran, North Korea, Syria, and Russia (varying levels)
SDN List: Specifically Designated Nationals list -- individuals and entities with whom U.S. persons are prohibited from transacting
Sanctions apply to ALL transactions, not just exports of controlled items
Even indirect transactions through intermediaries can violate sanctions (the "50% rule" for entities owned by SDNs)
Click to expand
Export Control Scenario Quiz
Test your knowledge: Is this export-controlled? Read each scenario, select your answer, and see the explanation.
Scenario 1 of 5
Score: 0 / 0
Module 05 -- AI Ethics
Ethical AI Governance in Defense
As AI systems become integral to defense operations, ethical governance ensures that autonomous and AI-assisted systems are developed and employed responsibly, maintaining meaningful human control.
🤖
Autonomous Weapons Ethics
Meaningful Human Control
The principle of meaningful human control requires that humans retain sufficient understanding and authority over weapons systems to be morally responsible for their use.
DoD Directive 3000.09 requires human judgment in the use of force
"Human-on-the-loop" systems allow human override but may act autonomously within parameters
"Human-in-the-loop" systems require explicit human authorization before engaging
Key question: Can the human meaningfully intervene, or is approval just rubber-stamping?
Click to expand
⚖️
Algorithmic Bias in Targeting
Fairness & Discrimination Risks
AI targeting systems trained on biased data can produce discriminatory outcomes that violate the Law of Armed Conflict principles of distinction, proportionality, and precaution.
Training data reflecting historical biases can encode discrimination into targeting algorithms
Low-confidence identifications in degraded environments increase risk of civilian harm
Testing must include adversarial scenarios designed to reveal bias patterns
Transparency in training data, model architecture, and confidence thresholds is essential
Click to expand
👥
Human-in-the-Loop Requirements
Automation Levels & Oversight
Different operational contexts require different levels of human oversight. Speed of engagement, consequence of error, and reversibility all factor into the appropriate automation level.
Level 1 -- Human Decides: AI provides information; human makes all decisions
Level 2 -- Human Approves: AI recommends; human must authorize before action
Level 3 -- Human Monitors: AI acts within parameters; human can override
Level 4 -- Human Supervises: AI acts autonomously; human monitors and intervenes on exception
The appropriate level depends on: time pressure, consequence severity, reversibility, and legal requirements
Click to expand
DoD AI Ethics Principles
In February 2020, the DoD adopted five ethical principles for AI. Click each to learn more.
R
Responsible
Personnel will exercise appropriate levels of judgment and care while remaining responsible for AI system development, deployment, and use.
▼
Accountability cannot be delegated to a machine. Humans must remain responsible for the outcomes of AI systems, with clear chains of responsibility established before deployment. This includes responsibility for training data quality, model validation, operational testing, and post-deployment monitoring.
E
Equitable
The DoD will take deliberate steps to minimize unintended bias in AI capabilities.
▼
AI systems must be designed and tested to avoid unfair discrimination. This requires diverse training data, bias testing across demographic groups, red-team adversarial evaluations, and ongoing monitoring for emergent biases in operational use. Particular attention must be paid to protected categories and vulnerable populations.
T
Traceable
AI capabilities will be developed and deployed such that relevant personnel possess an appropriate understanding of the technology.
▼
Decision-makers must be able to understand how an AI system reached its recommendation. This means maintaining audit trails, documenting training data provenance, preserving model versions, logging inference decisions, and providing explainable AI interfaces that allow operators to understand confidence levels and key factors driving recommendations.
R
Reliable
AI capabilities will have explicit, well-defined uses, and the safety, security, and effectiveness will be subject to testing and assurance.
▼
AI systems must perform as intended across their operational envelope, including degraded conditions, adversarial environments, and edge cases. Robust testing must include operational testing in realistic conditions, adversarial testing, stress testing, and regression testing. Systems must fail gracefully with appropriate fallback mechanisms.
G
Governable
AI systems will be designed and engineered to fulfill their intended functions while possessing the ability to detect and avoid unintended consequences.
▼
AI systems must have mechanisms for humans to disengage or deactivate them when they demonstrate unintended behavior. This includes kill switches, operational bounds, anomaly detection, and the ability to revert to manual operations. Governance structures must define authority to override, modify, or shut down AI systems at appropriate command levels.
Key AI Governance Frameworks
Multiple frameworks guide ethical AI development in defense. Understanding these helps navigate the complex governance landscape.
🏛️
DoD AI Strategy
Department of Defense
The 2023 DoD Data, Analytics, and AI Adoption Strategy establishes the framework for responsible AI integration across all defense operations and decision-making processes.
Establishes the Chief Digital and AI Officer (CDAO) as the senior responsible official
Requires Responsible AI (RAI) assessments before deployment of AI capabilities
Mandates AI testing and evaluation throughout the system lifecycle
Emphasizes workforce AI literacy at all levels of the department
Click to expand
🌎
NATO AI Principles
Alliance-Wide Standards
NATO's Principles of Responsible Use of AI complement DoD principles, adding lawfulness and commitment to international humanitarian law.
Lawfulness: AI must comply with international law including IHL
Responsibility & Accountability: Clear human accountability chains
Explainability & Traceability: Decisions must be understandable
Reliability: Bounded and well-defined use cases with safety assurance
Governability: Human control with the ability to disengage
Bias Mitigation: Proactive measures to reduce algorithmic bias
Click to expand
📚
NIST AI RMF
Risk Management Framework
NIST AI 100-1 provides a voluntary framework for managing AI risks. While not defense-specific, it informs DoD AI governance and contractor requirements.
Govern: Organizational policies and processes for AI risk management
Map: Context and risk identification for AI systems
Measure: Quantitative and qualitative assessment of AI risks
Manage: Risk treatment, monitoring, and documentation
Provides common vocabulary for AI risk discussions across government and industry
Click to expand
⚠️ Scenario: AI Targeting Recommendation
Ethics in Action
The 90% Confidence Call
An AI-assisted targeting system identifies a building as a high-value enemy command post with 90% confidence. The system recommends immediate strike. However, satellite imagery from 6 hours ago showed civilian activity nearby. The AI's confidence score does not factor in the age of the collateral intelligence. The operational window closes in 15 minutes. You are the authorizing officer.
A. Authorize the strike -- 90% confidence meets engagement threshold and the window is closing
B. Request updated collateral intelligence before authorizing -- accept the risk of the window closing
C. Authorize the strike but with a reduced munition to minimize collateral damage
D. Decline to authorize -- the AI's confidence score is incomplete without current collateral assessment
"The question is not whether machines can think, but whether the humans deploying them are thinking enough."
-- AI Ethics in Defense, 2023
Module 06 -- Ethical Dilemmas
Ethical Dilemma Scenarios
Practice ethical reasoning with realistic workplace dilemmas. Select the option that best reflects your judgment, then review the consequences. There are no "trick" answers -- each scenario is designed to reveal the nuances of ethical decision-making.
Safety vs. ScheduleSecurity ReportingGift RulesInformation SharingWhistleblowingTesting IntegrityExport ControlsSupply Chain Ethics
How to Use These Scenarios
1. Read the scenario carefully, noting the specific circumstances and pressures described.
2. Consider what you would actually do (not what you think the "right" answer is).
3. Select your choice and read the consequence -- each option has realistic outcomes.
4. Discuss with colleagues: reasonable people may choose differently, and the discussion is as valuable as any single answer.
5. Use the reset button to explore different choices and compare outcomes.
Dilemma 01
The Unwitnessed Test
You are a quality engineer on a satellite integration project. During a critical vibration test at 2 AM, you step away for 10 minutes and the data recorder malfunctions. When you return, the test technician says "everything looked normal on the monitors." The test cannot easily be repeated without a 3-week schedule delay and $200K cost. Your signature is needed to certify the test was properly witnessed.
A. Sign the certification -- the technician saw it and the monitors showed nominal data
B. Refuse to sign and report the gap -- the test must be repeated regardless of cost
C. Sign but add a caveat noting the monitoring gap in the test report
D. Escalate to the program manager and let them decide whether to retest
Dilemma 02
The Security Violation
You notice a colleague -- a close friend who is going through a difficult divorce -- left a classified document on their unclassified desk overnight. When you mention it the next morning, they say "please don't report it, I'll lose my clearance and my job, and I can't afford that right now." No one else saw the document, and it's now properly secured.
A. Don't report it -- no harm was done and your friend is in a bad situation
B. Report the violation to the security office -- the rules are clear
C. Give your friend 24 hours to self-report, then report it yourself if they haven't
D. Talk to your friend's supervisor informally to get the situation addressed without a formal report
Dilemma 03
The Vendor Gift
You are a government program manager. A vendor whose contract you oversee sends you a $15 gift card to a coffee shop with a holiday card. Other PMs in your office have received similar gifts and kept them. The vendor has a contract modification pending your review.
A. Keep it -- it's under the $20 threshold and everyone else does
B. Return it with a polite note explaining the policy
C. Accept it but recuse yourself from the pending contract modification
D. Report it to your ethics counselor and follow their guidance
Dilemma 04
Data Sharing with Allies
An allied nation's military liaison urgently requests sensor performance data for a joint operation starting in 48 hours. The data is classified SECRET and releasable to this ally under an existing agreement. However, you discover the specific dataset they need includes test results from a compartmented program with more restrictive access. The liaison insists the operational need is critical and time is short.
A. Release the data -- the existing agreement covers this type of information and the operational need is real
B. Refuse and explain that the compartmented data requires separate authorization
C. Release a sanitized version that removes compartmented details but preserves operational utility
D. Escalate to the Foreign Disclosure Officer for an emergency release determination
Dilemma 05
The Whistleblower's Dilemma
You discover that your company has been systematically charging labor hours to the wrong contract to avoid overrunning a troubled fixed-price program. The mischarging has been going on for months and involves your direct supervisor. You've raised it internally with your manager and were told to "mind your own business." Company leadership has not responded to your concerns.
A. Document everything and report to the company's ethics hotline / ombudsman
B. Report directly to the DCAA (Defense Contract Audit Agency) or the IG
C. Consult a whistleblower attorney before taking further action
D. Let it go -- you've raised it internally and the risk of retaliation is real
Dilemma 06
Schedule vs. Testing
Your program has a congressionally mandated delivery date in 6 weeks. Environmental qualification testing is 2 weeks behind schedule. Your chief engineer proposes skipping the thermal vacuum test and using analysis-only qualification, noting that a similar design passed thermal vac 3 years ago. The customer is pressuring for on-time delivery.
A. Accept analysis-only -- the heritage data supports it and the deadline is firm
B. Insist on full testing and formally request a schedule extension through the customer
C. Propose a reduced thermal vac test that covers the most critical thermal cases
D. Deliver on time with a qualification caveat and plan to complete testing post-delivery
Dilemma 07
The Conference Presentation
You've been invited to present at an international aerospace conference. Your abstract was approved by your company's export control office. At the conference, during Q&A, a foreign national asks a detailed technical question. Your honest answer would include performance parameters that are EAR-controlled. The audience includes engineers from several countries.
A. Answer the question -- you're at a public conference and the information is general
B. Decline to answer, stating you cannot discuss specific performance parameters
C. Provide a vague answer that hints at the capability without providing specific data
D. Offer to continue the discussion offline after verifying the person's nationality and export eligibility
Dilemma 08
The Subcontractor's Shortcut
During a supplier audit, you discover that a critical subcontractor has been substituting a cheaper alloy in structural components without updating the material certification. The parts pass all functional tests, but the substitution was not authorized through the formal material review process. Replacing the parts would delay the program by 4 months.
A. Accept the parts since they pass functional testing -- the alloy difference is minor
B. Reject the parts and require replacement with certified materials
C. Initiate a Material Review Board (MRB) to formally evaluate whether the substitution is acceptable
D. Report the subcontractor to DCMA for fraudulent material certification
Module 07 -- Self-Assessment
Ethics Maturity Self-Assessment
Rate yourself honestly on these 15 statements to gauge your current ethics maturity level. Your results stay in your browser and are not transmitted anywhere.
Scoring Rubric
🌱
Developing (15-37)
Building Awareness
You are in the early stages of building ethics awareness. Focus on learning your organization's ethics infrastructure, understanding the regulations that apply to your work, and building confidence in raising concerns. Seek mentoring and training opportunities.
🌟
Competent (38-59)
Solid Foundation
You demonstrate solid ethics awareness and are comfortable in most situations. To advance, focus on the specific areas where you rated yourself lower. Practice raising difficult concerns in lower-stakes situations to build confidence for higher-stakes ones.
🏆
Exemplary (60-75)
Ethics Leader
You demonstrate strong ethics maturity across domains. Your next challenge is being a force multiplier: mentoring others, advocating for organizational improvements, and creating a culture where ethical behavior is the path of least resistance.
Personal Ethics Commitment
Based on your self-assessment, build a personal ethics commitment. This is saved in your browser for future reference.
My Core Ethical Principle
One Behavior I Will Change
My Accountability Mechanism
Ethical Boundary I Will Not Cross
My Ethics Commitment
Reference -- Decision Framework
Ethics Decision-Making Framework
When facing an ethical dilemma, use this structured framework to reason through your options systematically.
1️⃣
Identify the Issue
Step 1 -- Recognition
What is the ethical issue? Who are the stakeholders? What values are in conflict? Is this a legal, regulatory, professional, or personal ethics question?
Separate the ethical dimension from the business/technical decision
Identify all affected parties: employees, customer, public, warfighters, taxpayers
Clarify which laws, regulations, codes, or policies are relevant
Ask: "Would I be comfortable if this decision appeared on the front page?"
Click to expand
2️⃣
Gather Information
Step 2 -- Analysis
What are the facts? What do you know, and what do you not know? What additional information would change your assessment?
Distinguish facts from assumptions and opinions
Consult relevant regulations, standards, and precedents
Seek perspectives from people with different viewpoints
Identify what you would need to know to be confident in your decision
Click to expand
3️⃣
Evaluate Alternatives
Step 3 -- Options
What are all the possible courses of action? What are the consequences of each? Who is helped and who is harmed by each option?
Utilitarian Test: Which option produces the greatest good for the greatest number?
Rights Test: Does any option violate the fundamental rights of any stakeholder?
Fairness Test: Would a disinterested observer consider this option fair to all parties?
Virtue Test: Would a person of integrity take this action?
Reversibility Test: Would I want this done to me if I were on the receiving end?
Click to expand
4️⃣
Act and Reflect
Step 4 -- Decision & Review
Make your decision, implement it, document your reasoning, and reflect on the outcome. Ethical competence is built through deliberate practice.
Document your reasoning in writing -- this protects you and helps others learn
Communicate your decision and rationale to affected stakeholders
Monitor the outcome and be prepared to adjust if new information emerges
Reflect on what you learned and how you would handle a similar situation in the future
Share the experience (appropriately anonymized) to help build organizational ethics capacity
Click to expand
Key Ethics Resources
Know where to go when you face an ethical question.
Correcting common misconceptions about ethics in the defense industry. These misunderstandings frequently lead to violations.
❌
"Everyone Does It"
Myth: Normalization of Deviance
The fact that others engage in questionable practices does not make those practices ethical or legal. Normalization of deviance was a root cause in both the Challenger and Columbia disasters.
Myth: "If the practice is widespread, it must be acceptable."
Reality: Widespread violations simply mean the risk of enforcement action is growing. When one company is caught, investigators look for patterns across the industry.
The False Claims Act qui tam provisions create financial incentives for insiders to report fraud, making "everyone does it" an increasingly dangerous assumption.
Click to expand
❌
"It's Just a Technicality"
Myth: Rules Without Purpose
Export control rules, classification procedures, and procurement regulations exist for specific reasons. What appears bureaucratic often has a national security rationale that is not immediately visible.
Myth: "This rule is just red tape -- nobody really cares about it."
Reality: ITAR "technicalities" prevent adversaries from accessing weapons technology. Classification "technicalities" protect intelligence sources and methods. Procurement "technicalities" prevent corruption.
If a rule seems pointless, ask someone who understands its origin. You may be surprised by the threat it was designed to counter.
Click to expand
❌
"I Was Just Following Orders"
Myth: Obedience Trumps Ethics
Following a supervisor's direction to commit an ethical violation does not absolve you of responsibility. The Nuremberg defense has been rejected in both military and civilian contexts.
Myth: "My boss told me to do it, so I'm covered."
Reality: You have a personal legal and ethical obligation to refuse unlawful orders. Professional engineering codes explicitly require engineers to override management when public safety is at stake.
If your supervisor directs you to do something unethical: document the direction, state your objection, and escalate through proper channels (ethics hotline, IG, legal counsel).
Click to expand
❌
"No One Will Find Out"
Myth: Undetectable Violations
Defense programs have extensive audit trails, inspector general oversight, whistleblower incentives, and post-incident investigations. Violations that seem invisible often surface years later.
Myth: "This is a small issue and there's no paper trail."
Reality: DCAA auditors, IG investigators, and qui tam relators uncover fraud years after it occurred. Digital systems create records even when you think they do not. A colleague who witnesses your actions today may report them next year.
The question is not whether you will be caught, but whether you can live with the person you become when you choose to cut corners.