Exposure to potential liability for technology failures is best understood through the lens of business risk. This concept centers on identifying what could go wrong in operations, estimating how likely those failures are, and assessing the financial and reputational impact they could have on the organization. In the Bhopal case, a severe industrial accident underscored how design, maintenance, and safety lapses can lead to enormous legal costs, regulatory penalties, cleanup obligations, settlements, and long-lasting reputational damage. Framing it as business risk helps a company prioritize safeguards, allocate reserves, and strengthen governance to prevent or mitigate such exposures. While other ideas can play a role in decision-making, they describe different angles. Professional skepticism is about an auditor’s mindset to challenge information, not a framework for evaluating liability exposure. Cost-benefit analysis is a tool to weigh actions but doesn’t by itself define liability risk, though it can inform safety investments. Rights Theory provides an ethical lens about stakeholders’ rights, but it isn’t the operational framework used to gauge liability exposure from technology failures.

Organizational ethics provides the values, norms, and expected behavior within the company—it's the moral compass that guides what people should do in daily decisions. Corporate governance, on the other hand, provides the framework of systems, processes, and controls—board oversight, policies, internal controls, risk management, and accountability mechanisms—that ensure those ethical expectations are translated into action and that there is proper guidance and consequences when they aren’t followed. Together, they improve ethical outcomes because ethics sets the standard for what is right, while governance puts concrete mechanisms in place to monitor, enforce, and sustain that standard. Without governance, good values can drift or be ignored; without ethics, governance becomes empty rules lacking purpose. This description reflects organizational ethics as values and behavior within the company, and corporate governance as the guiding structures and controls that steer toward ethical conduct.

Shared values, clear goals, and collaborative problem-solving form the backbone of an ethical organization. When people operate from common values, they have a shared sense of what is right and fair, which guides everyday decisions even when no one is watching. Clear, aligned goals keep efforts coordinated, so actions are consistent with what the organization stands for. Coupled with robust problem-solving mechanisms—think transparent reporting channels, inclusive decision processes, and fair ways to address concerns—these elements create accountability and trust, and they ensure issues are addressed rather than hidden. Zero tolerance for mistakes can create fear and suppression of reporting, hindering learning and improvement. A sole focus on results over process can encourage cutting ethical corners to hit targets. A attitude of “do what I say, not what I do” undermines trust and signals hypocritical leadership. In contrast, shared values, aligned goals, and constructive problem-solving best embody true organizational ethics.

The question tests your understanding of how fraud is typically detected and categorized in the ACFE 2014 Report to the Nation on Occupational Fraud. The report consistently shows that tips are the most common detection method, not audits, and that frauds often go undetected for a substantial period, with a median around 18 months. It also finds that asset misappropriation is the most frequent type of occupational fraud. External auditors do play a role, but the report places them as a relatively smaller detection channel compared with tips and internal sources, usually well under ten percent. Therefore, the statement that external auditors discover about 10 percent of the frauds is not aligned with the report’s findings, making it the incorrect choice. The other points—tips as the primary detection method, the 18-month median duration, and asset misappropriation being the most common type—are consistent with the report.