◇ OpenCyber Academy
Engineering · Chapter 10 · English

Chapter 10 — Engineering ethics and safety

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 10 — Engineering ethics and safety

Lesson map

Lesson 10 published. Map, example, EX028.

flowchart TD
  N0["Learning outcomes"]
  N1["10.1 Duty to the court"]
  N2["10.2 Conflicts of interest"]
  N3["10.3 Personal data"]
  N4["10.4 Disturbing material"]
  N5["10.5 Physical safety"]
  N6["10.7 Codes of conduct"]
  N7["Raising concerns"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> N6 --> N7
  N7 --> EX["Worked example"]
  EX --> Q["Exercise EX028"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["10.1 Duty to the court"]
  N2["10.2 Conflicts of interest"]
  N3["10.3 Personal data"]
  N4["10.4 Disturbing material"]
  N5["10.5 Physical safety"]
  N6["10.7 Codes of conduct"]
  N7["Raising concerns"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> N6 --> N7 --> Q["EX028"]
[Learning outcomes]
    |
    v
[10.1 Duty to the court]
    |
    v
[10.2 Conflicts of interest]
    |
    v
[10.3 Personal data]
    |
    v
[10.4 Disturbing material]
    |
    v
[10.5 Physical safety]
    |
    v
[10.7 Codes of conduct]
    |
    v
[Raising concerns]
    |
    v
[Worked example] --> [Exercise EX028]

Learning outcomes

You will (1) apply professional ethics to forensic engineering; (2) identify conflicts of interest; (3) handle personal data responsibly; (4) recognise physical and psychological safety issues.

10.1 Duty to the court

Forensic experts owe their primary duty to the court, not to the side that pays. Engineers building forensic systems share that duty indirectly: a tool that hides errors misleads everyone downstream.

In practice this means reporting results that weaken the case of whoever commissioned the work, disclosing limitations honestly and correcting errors as soon as they are found. For an engineer it means a tool that reports failures clearly, documents what it cannot parse and never smooths over gaps. A quiet default that hides an unreadable sector could end up misleading a court.

10.2 Conflicts of interest

Priya's capstone partner also sells software to Northfield. She records the relationship and keeps the evaluation criteria fixed before any product is tested.

Recording the relationship is the first step. Managing it is the second: the partner takes no part in scoring the product his employer sells, and the evaluation results are reviewed by someone without a stake. Fixing the criteria before testing prevents them from being adjusted afterwards to favour or penalise any vendor. The written record lets an outsider check that the process was fair.

10.3 Personal data

Seized devices hold private information about victims, suspects and bystanders. Access is limited to what the authorised examination requires. Students never handle real case data; Priya uses synthetic images.

Limiting access in a review tool can mean defaulting to search results rather than a browsable file tree, masking contact details that are not relevant, and logging every item an examiner opens. Data minimisation also applies to outputs: a report quotes only what supports a finding. Synthetic images let students practise all of this without any real person's privacy being at stake.

10.4 Disturbing material

Some casework includes abusive images. Labs offer welfare support and restrict exposure; engineers designing review tools consider features that reduce unnecessary viewing.

Design choices can reduce exposure: greyscale or blurred thumbnails by default, matching against known-hash databases so that previously classified images need not be viewed again, and limits on continuous viewing time. Welfare support is confidential and normal to use. An engineer who builds review tools treats these features as requirements, not optional extras. Rotating staff off the heaviest review work is planned in advance rather than left until someone asks.

10.5 Physical safety

Damaged lithium batteries in seized phones can overheat or ignite. Evidence stores follow safe handling and storage guidance.

Warning signs include a swollen case, heat, hissing or a sweet chemical smell. Damaged devices are stored in fire-resistant containers away from other evidence, and charging is done only when necessary and under supervision. Staff know where the extinguishers are and which kind suits lithium fires. Recording the device's condition at intake also protects the lab if the device later fails. Intake photographs record any swelling.

10.6 Honesty about limits

If a tool fails a test, the result is reported, not buried.

The report then states which test failed, what the result was and how the failure affects past work. Cases run with the affected version may need to be reviewed, which is costly, but hiding the failure costs more if it comes out in court. Priya's validation log has a field for failed tests that cannot be left blank, so 'none' has to be written deliberately. Honesty also covers what a method cannot show: a timeline built from file system timestamps alone cannot prove who was at the keyboard, and the report says so rather than leaving the reader to assume it.

10.7 Codes of conduct

Professional bodies publish codes requiring competence, integrity and confidentiality; Priya reads her institute's code and notes which clauses apply to forensic work.

Typical clauses require working within one's competence, avoiding conflicts or declaring them, keeping confidential information private and reporting unethical practice. For forensic engineering, competence includes knowing a tool's limits before relying on it. Priya writes a short note on each relevant clause describing a situation in her course where it would apply, which turns the code into practical guidance.

Raising concerns

If Priya sees a colleague cut corners — skipping a verification hash to save time — she raises it with the supervisor promptly and factually. Labs that welcome such reports catch problems before they reach court. Her institute's code expects members to speak up, and it protects those who do so in good faith.

Worked example

A vendor offers the class free licences if the capstone report praises their product. Priya declines the condition, notes the offer in her conflict log and tells her supervisor. The evaluation proceeds with pre-set criteria.

Synthetic case. The vendor offer is invented.

Errors and limits

Ethics rules guide judgement; they do not replace it when situations are new.

Exercises

Synthesis

Ethical forensic engineering means fixed criteria, protected data, honest results and safe handling.

Continue studying — chapter 10 of 50

← Chapter 09 (draft) · Course chapter index · Chapter 11 (draft) →