ACM-SW study materials
ACM-SW study resources

ACM-SW: Software Engineering Professional Practice and Ethics

ACM-SW · Work through your exam, one topic at a time.

All guide sections

Software Engineering Professional Practice and Ethics

What to know

Professional practice covers codes of ethics (e.g., ACM/IEEE Software Engineering Code), professional responsibility, competence, confidentiality, conflict of interest, and intellectual property. Know the eight principles commonly cited: public, client and employer, product, judgment, management, profession, colleagues, and self. Engineers must prioritize public safety and welfare, disclose risks, avoid misrepresentation of skills or product capability, and respect licensing, copyright, patents, and trade secrets.

Understand legal and contractual basics: liability, warranties, NDAs, and data protection obligations. Whistleblowing is justified when public harm is serious and internal channels fail. Cultural and accessibility considerations (inclusive design, WCAG) are professional obligations, not optional polish.

Traps in questions

  • Loyalty vs public interest: when employer instructions conflict with public safety, public safety prevails.
  • Competence: accepting work beyond your ability without disclosure is unethical, even if well-intentioned.
  • IP confusion: copyright protects expression, patents protect inventions, trade secrets protect confidential know-how; open-source licenses impose conditions (attribution, copyleft).
  • Data handling: reusing customer data for unrelated purposes without consent violates professional and legal norms.
  • Conflicts of interest: must be disclosed, not merely avoided.

Rule of thumb

When facing an ethical dilemma, apply a decision test: Who is affected? What harm could result? Is the action honest, lawful, and consistent with the public interest? Would I be comfortable if it were public?

Worked example

A manager asks you to ship a release with a known security flaw that could expose user data. The flaw creates serious public harm. Correct action: document the risk, escalate through internal channels, refuse to certify the release as safe, and if unresolved, consider further disclosure. Confidentiality does not excuse concealing foreseeable harm.