SYS 564

Lecture: Professionalism & Ethics

AgendaProfessionalismEthicsAccreditation

2What is Professionalism?Profession (Sage Canadian Dictionary):An occupation requiring special postgraduate education and training, especially law, medicine, teaching, engineering, or the ministryPeople collectively engaged in a profession (i.e. doctor, lawyer)

3What are professions?Full-time, paid occupationsrecognized in society:as requiring advanced knowledge and/or skill,with at least one association members can or must join,and a code of conduct/ethics.

Some professions are legally recognizedGovernments have passed laws recognizing membersIn turn, members have a legal responsibility to uphold the interests of society, above other interests

Others professions are less formal4Professions with legal recognitionProfessions with signoff-restricting licenses or certifications A licensed/certified person must approve certain types of work done, but may delegate most of the work to othersEngineering (in some places), Financial Analysis (CFA), Chartered Accountancy (CA), Certified Management Accountancy (CMA), Logistics, certain trades (Electrician, Plumber)

Professions with legal standing but where there is no license issued nor legal requirement for signoff of workInformation Systems Professional (I.S.P.) in Canada56Professions with legal recognitionProfessions with practice-restricting licenses in many jurisdictionsPractice/aspects of practice are limited to license holdersMedicine, Dentistry, Chiropractic, Pharmacy, Law, School Teaching, Engineering (in theory in Canada), ArchitectureSome licensed professions in Ontario http://www.citizenship.gov.on.ca/english/working/career/*Divinity (those licensed can perform marriages, etc), etc.Those requiring less education are commonly called trades*Truck Driving, (required training and drivers license)*Hairdressing, barbering7Professions without legal recognitionProfessions with optional certifications that do not have legal weightSoftware Development (CSDP), Project Management (PMP)Discussed later

Professions not generally licensed or certified, but where a degree or diploma provides evidence of competenceScientist (various types), Journalist

Other professions or trades where an apprenticeship model is typically followedMason

Professions where the limiting factor is simply that you must have sufficient skill or knowledge that someone is willing to pay you enough to do it full timeUniversity or College Professor, Sport player (Hockey, Golf, Football), Actor, Artist, Musician, Politician8Key attributes of a professionPublic recognition: Others outside profession X understand what a member of profession X does and can doSo outsiders know who to consult when they want some serviceSo outsiders can feel confident they are getting work done by someone competent

To ensure public recognition: There must beA defined scope of practiceA recorded body of knowledge (principles, facts, best practices, required procedures such as the building or plumbing code)A code of ethics consequences when it is violatedMethods to educate/train, accredit education, and ensure continuing educationWell-understood criteria for membershipOrganizations to establish and administer the above9So what does it mean to exhibit professionalism?Obtain the required education and ongoing education (D)

Adhere to the code of ethics (C)

Apply the principles and knowledge properly (B)

Practice within the scope of your expertise (A, D) and defer to others when boundaries are reached

Obtain and maintain appropriate credentials (E)

Participate in the appropriate professional organizations (F)10Other attributes of many professionsMembership and practice may be limited or controlled

The profession may be self-governingThe profession controls all attributes described on the last slide Members are disciplined by their organization

There may be legal recognition and responsibilityIncludes the concept of malpractice

Being a professional may confer respectability / status / social privilege

11Specializations / SpecialtiesMost professions have well-defined specialties, often with their own certifications and associationsMedicine: Board-certified specialties

IT/Computing:AI - American Association for Artificial IntelligenceProject management Professional http://www.pmi.orgInformation security (Certified Information Security Manager) http://www.isaca.org/Template.cfm?Section=CISM_CertificationHacking (Certified Ethical Hacker) http://www.certifiedethicalhacker.com/Certified Information Technology ProfessionalInformation Systems ProfessionalVendor-specific certifications (Microsoft, Oracle)etc.12Different Types of Professionals in ComputingComputer ScientistConceptually: Researches/develops new techniques in computingIn practice: Develops software, often specializing in some areas of practice such as particular types of architectureSoftware EngineerConceptually: Has deep skills in the areas of the SE lifecycle: Requirements, design, implementation, plus managementFocus on systems where safety or other areas of public interest are of concernIn practice: Very little difference from a computer scientistjust one of several computing specialties that employers consider to largely overlapBut: A software engineering graduate has a straight-forward path to the P.EngAlso: Computer Engineer, programmer, technician, business analyst, database administrator, technical writer, user-support specialist, cognitive scientist, engineer or scientist developing software, etc.13General Professional Associations for Computer ProfessionalsCIPS - Canadian Information Processing SocietyThe national society for computing in CanadaUS-based associations with international membershipACM - Association for Computing MachineryIEEE Computer SocietyAustralian Computer SocietyBritish Computer Society

CertificationAn earned professional designation which assures qualification as a professional

Earned through a professional body (society) who sets the criteria for eligibility of the qualificationUsually:Course of study in an accredited programProof of professional accomplishments (work experience)Examination

14CertificationValue of certification:Demonstrates commitment to your professionIncreases your professional credibilityAdhere to the code of ethicsMastery of a BOK (Body of Knowledge)Committed to ongoing education

15CertificationMust be renewed periodically (usually annually)

Types:Legal (doctors, dentist, lawyers, truck drivers, teachers) vs: non legal (PMP, apprentices, athlete)Product-Specific (i.e. MCSE, CISCO)Professional-wide (i.e. CGA, CA)

16IT Certification Vendor specificCiscoIBMMicrosoftRed HatSAP..Third partyCompTIACISSPITIL General CertificationIEEECITP (BCS)I.S.P./ITCP (CIPS)

1718CIPSCanadian Information Processing SocietyStarted in 1958Helped strengthen the Canadian IT industry by establishing standards and sharing best practices for the benefit of individual IT professionals and the sector as a wholeHas thousands of members nationallyStudent Memberships: http://www.cips.ca/studentsjoin Offers:Networking opportunitiesCertification of IT professionals (I.S.P. and ITCP designations)Accreditation of IT university and college programsA voice to government on issues that affect the profession and industry

19Some Activities of CIPSPresents professional development and social-networking events

Certifies individual practitioners (I.S.P. and ITCP)

Accredits academic institutionsCSAC - Computer Science Accreditation CouncilISTAC Information Systems and Technology Accreditation Council

Adopts standards of practice

Advocates on behalf of the profession

20CIPS Wants Us to BecomeTrusted ProfessionalsTrusted CompetenceMastery of a defined body of knowledge evaluated in one of several waysIncludes a set of best practicesA considerable period of experience

Trusted intentionsAdhering to a code of ethics

21The Information Systems Professional (I.S.P.) Certificationhttp://www.cips.ca/isp

GoalsProtection of the publicProfessional credibilityPersonal integrity and competenceEnhanced customer confidenceEnhanced professional profileIncreased value to employer

22The I.S.PA provincially-administered national standardRecognized by statute in 6 provinces as a self-regulating professionCanadian Information Processing Society of Ontario Act, 1998, c.Pr5See http://local.cips.ca/ontario/documents/pr21_final.pdfAnd http://local.cips.ca/ontario/Mutual recognition with other countries (British Computer Society, Australian Computer Society, New Zealand Computer Society, and in the US-ICCP http://iccp.org)

23Routes to the I.S.PEducation plus experienceAn accredited degree makes this fasterCPD, CPA and BSD programs at Seneca are accredited

Exam based

Professor at a university/college

Industry leader / Senior established professional

24ITCPInformation Technology Certified Professionalhttp://www.ipthree.org/http://on.cips.ca/ITCPEventsCertifies a higher level of knowledge than the I.S.PSFIA (Skills Framework for the Information Age: http://www.sfia.org.uk) level 5 IP3: International Professional Practice PartnershipA body that uses accreditation standards (IP3P) to certify national professional certifications like ITCP Sponsored by IFIP (http://www.ifip.org/) The International Federation for Information ProcessingA variety of countries have IP3-accredited certificationsAustraliaUKUS (IEEE Computer Society is working on it)

25Some Benefits of Professional Status in ComputingSocial and societal standingComputing professionals have similar responsibilities to society as engineers, doctors, lawyers, accountants, financial analysts, etc.Other professionals, members of the public and the media need to know who to consult

Legal reasonsJudges and lawyers need to know who can be considered an expert witness in a court case involving computing or ITThe Chief Information Officer (CIO) of a corporation needs to know who has the expertise to certify that the corporation has adhered to laws and regulationsPrivacy acts like PIPEDACorporate regulatory complianceE.g. Sarbanes Oxley Act in the US26Benefits of Professional Status in ComputingWe need better software and IT services, hence better people to develop and deliver theseProfessional status comes with a requirement to maintain competenceThe more professionals there are, the more clients and employers will decide to insist on hiring a certified professionalIt will give them extra confidenceAs a result, the quality of products and services should rise

27Bodies of Knowledge in ComputingBody of Knowledge:Body of Knowledge (BOK) is a term used to represent the complete set of concepts, terms and activities that make up a professional domain, as defined by the relevant professional association.While the term body of knowledge is also used to describe the document that defines that knowledge - the body of knowledge itself is more than simply a collection of terms; a professional reading list; a library; a website or a collection of websites; a description of professional functions; or even a collection of information. It is what defines a specific domain.Some examples:Software Engineering Body of KnowledgeSWEBOKSkills Framework for an Information AgeSFIACIPS Body of Knowledge Under development

28SWEBOKAn IEEE Computer Society effort: http://www.swebok.orgBasis for Certification, Curriculum Development and US Accreditation

Knowledge areasRequirements DesignConstruction (detailed design) TestingMaintenance Configuration managementSoftware Engineering management ProcessTools and methods QualityThe upcoming version will have:Engineering economicsComputing foundations (core computer science)Mathematical foundations (discrete math and statistics)Engineering foundations (cost benefit analysis, etc.)

29SFIA: Skills Framework for the Information AgeDeveloped in UK, but used worldwidehttp://www.sfia.org.uk/Basis for IP3 accreditation

Seven levelsLevel 1: New entrantLevel 5: Senior professional (e.g. ITCP)Level 7: Director

At different levelsBasics of additional knowledge categories should be learnedGreater depth in certain categories needed30SFIA Knowledge Categories1-21 Strategy and architectureInformation, Business/IT, Technical22-31 Business change implementation and managementProject management, business analysis and modelling32-48 Solution development and implementationSystems development (requirements; software/network/data design; programming; safety engineering; information content authoring; testing)Human factors (ergonomics, usability requirements and evaluation)Installation and Integration (installation, porting, decommissioning)49-66 Service managementService strategy (IT management, financial management for IT, capacity and availability managementConfiguration, change and release managementService operation (system software; security; support of applications, network, database; service desk and problem handling)67-82 Procurement and management supportSupply, quality, resource and learning management83-86 Client interface: Marketing and client supportAgendaProfessionalismEthicsAccreditation

3132EthicsWhat is Ethics:Study of what it means to do the right thingAssumes people are rational and make free choicesRules to follow in our interactions and our actions that affect others

33Ethics No simple answers to many ethical questionsDo organizations (businesses) have ethics?

Important Distinctions: Right, wrong and okay

Difference between wrong and harmWrong: May cause harm, but may notHarm: Bad consequence actually occurs

Personal preference and ethicsCollective rights vs. individual rights

Law and Ethics

34Summary of the CIPS Code of Ethicshttp://www.cips.ca/ethics

1. Protect the Public Interest and Maintain IntegrityWork with due regard for health, safety and the environmentReport problems that may injure persons, organizations, property or the economyNot discriminate on any grounds, such as race, sex, sexual orientation, nationality, social origin, family status or disabilityNot bring the profession into disrepute35Summary of the CIPS Code of Ethics2. Demonstrate Competence and Quality of ServiceServe client in conscientious, diligent and efficient mannerNot undertake a task unless you have competence or can become competent without delay, risk or expense to the clientExercise uncompromised judgmentBe honest and candid when providing serviceMaintain competence (constantly update knowledge)Be aware of and compliant with legislation, standards and bodies of knowledgeRespect rights of third parties, such as giving credit where it is dueRespect property rights36Summary of the CIPS Code of Ethics3. Maintain Confidential Information and PrivacyDuty of Secrecy: Clients have a right to expect that anything disclosed, seen or overheard will remain confidentialDo not even disclose having been retained by the clientRespect PIPEDA (Privacy Act) and other laws

4. Avoid Conflict of Interest

5. Uphold Responsibility to the IT ProfessionUse courtesy and good faith when dealing with other professionalsParticipate in professional societiesSupport others in their professional development37What should guide ethical decision making? Seven levelsInternational treaties and agreementsLaws (statutes)RegulationsStandards of good practiceProfessional codes of ethicsCorporate policiesCommunity and personal values38Ethical JudgmentIs a kind of pattern recognitionIt gets better with experience39Method for Ethical AnalysisTake a set of ethical points of viewEquality, justice, respect, self-respect (integrity)Gather all ethically relevant facts regarding the situation and people involvedActions, roles, relationships (e.g. conflicts of interest)Identify key issuesLook for an existing policy or law that matchesPay attention to precedents and people who might be sensitive to any given solutionIf a solution found, apply itBut watch out for conflicting policies, laws, principles and points of viewOtherwise apply higher-level general principles and consult with others40Example ethical situation 1You are developing software for the government that determines whether someone is eligible for a drivers license

You think there is a problem in the law that will deny certain people licenses that is unfair in your opinionE.g. old people when somebody has complained about their driving

You consider adjusting the software so that the public complaints are ignored by the software

What are the ethical implications?41Example ethical situation 2You realize that the software a colleague developed has been over-billing customers.

If you reveal the problem and the company pays back the money, they company may go bankrupt and you may lose your job.

What do you do?42Example ethical situation 3You discover a vulnerability in your companys software that could lead hackers to break in and obtain or alter critical information causing great harm

You could just work with the company to fix it quietly and say nothing to others

But perhaps you should notify the users and customers so they can take steps to protect themselves in case hackers break in before the fix is madeBut this might cause great harm to the companys reputation

What do you do?

AgendaProfessionalismEthicsAccreditation

4344Accreditation of Computing ProgramsProvides evidence that computing education meets the standards of the profession

Performed in Canada by a CIPS agency CSACComputer Science Accreditation CouncilAccredits University CS and SE Programs in CanadaISTACInformation Systems and Technology Accreditation CouncilAccredits College CST diploma and degree programs in Canada

CS Accredited programs: http://www.cips.ca/node/288SE Accredited programs: http://www.cips.ca/node/289CST Accredited programs: http://www.cips.ca/AppliedDegreePrograms and http://www.cips.ca/ComputerTechnologyDiplomaPrograms 45Accreditation of Computing Programs International recognition of CSAC accreditations through the Seoul Accordhttp://www.seoulaccord.com/Analogous to the Washington Accord for engineering and Canberra Accord for architectureUS, Korea. Australia, UK, Canada, Hong Kong, Taiwan, JapanYour degree will be recognized for certifications in these countries

All accreditation agencies are themselves accreditedAAAC: Association of Accrediting Agencies of Canadahttp://www.aaac.ca

46Overview of Criteria for Computing Program AccreditationElements assessedCollege EnvironmentFacultyStudentsFacilities and ResourcesCurriculum GeneralApplication domain Basic and advanced technicalApplied Communications and professionalismIndustry SupportInnovation and Research47CreditThank you to Timothy Lethbridge PhD, P.Eng., I.S.P., CSDP for providing this lecture. Tim is a Professor of Software Engineering and Computer Science at the University of Ottawa.