Module 7: Ethical Decisions in Software Development Flashcards
When an organization decides to accept a risk because the cost of avoiding the risk outweighs the potential loss of the risk. A decision to accept a risk can be extremely difficult and controversial when dealing with safety-critical systems because making that determination involves forming personal judgments about the value of human life, assessing potential liability in case of an accident, evaluating the potential impact on the surrounding natural environment, and estimating the system’s costs and benefits.
acceptance
A software development methodology in which a system is developed in iterations lasting from one to four weeks. Unlike the waterfall system development model, agile development accepts the fact that system requirements are evolving and cannot be fully understood or defined at the start of the project.
agile development
The estimated loss from a potential risk event over the course of a year. The following equation is used to calculate the annual loss expectancy: A× SLE = ALE. Where ARO is the annualized rate of occurrence, an estimate of the probability that this event will occur over the course of a year and SLE is the single loss expectancy, the estimated loss that would be incurred if the event happens.
annualized loss expectancy (ALE)
An estimate of the probability that a risk event will occur over the course of a year.
annualized rate of occurrence (ARO)
The elimination of a vulnerability that gives rise to a particular risk in order to avoid the risk altogether. This is the most effective solution but often not possible due to organizational requirements and factors beyond an organization’s control.
avoidance
A method or technique that has consistently shown results superior to those achieved with other means and that is used as a benchmark within a particular industry.
best practice
A type of dynamic testing that involves viewing the software unit as a device that has expected input and output behaviors but whose internal workings are unknown (a black box).
black-box testing
When a product fails to meet the terms of its warranty.
breach of warranty
A set of interrelated components—including hardware, software, databases, networks, people, and procedures—that collects and processes data and disseminates the output.
business information system
Collection of best practices that help organizations improve their processes.
Capability Maturity Model Integration (CMMI) models
A specific application of CMMI frequently used to assess and improve software development practices.
CMMI-Development (CMMI-DEV)
When the plaintiffs’ own actions contributed to their injuries
contributory negligence
A type of business information system used to improve decision making in a variety of industries.
decision support system (DSS)
Products created during various stages of the development process, including statements of requirements, flowcharts, and user documentation.
deliverable
A QA process that tests the code for a completed unit of software by actually entering test data and comparing the results to the expected results.
dynamic testing
A description of how a product or process could fail to perform the desired functions described by the customer.
failure mode
An important technique used to develop ISO 9000-compliant quality systems by both evaluating reliability and determining the effects of system and equipment failures.
failure mode and effects analysis (FMEA)
A logging and monitoring system used by safety engineers to track hazards from a project’s start to its finish.
hazard log
Systems that are easy to learn and use because they perform quickly and efficiently; they meet their users’ needs; and they operate safely and reliably so that system downtime is kept to a minimum
high-quality software system
Software testing done after successful unit testing, where the software units are combined into an integrated subsystem that undergoes rigorous testing to ensure that the linkages among the various subsystems work successfully.
integration testing
A set of standards written to serve as a guide to quality products, services, and management. It provides a set of standardized requirements for a quality management system.
ISO 9000 family of standards
The reduction in either the likelihood or the impact of the occurrence of a risk.
mitigation
An approach to minimizing the impact of software errors by independently implementing the same set of user requirements N times (where N could be 2, 3, 4 or more); the N-versions of software are run in parallel; and, if a difference is found, a “voting algorithm” is executed to determine which result to use
N-version programming