Engineering ethics covering safety, professional codes of conduct, public welfare responsibility, whistleblowing, case studies (Challenger, Columbia, Hyatt Regency, Bhopal, Therac-25), and the ethical dimensions of design decisions. Includes the NSPE Code of Ethics, the iron ring tradition, risk communication, informed consent in engineering, and the duty to dissent. Use when analyzing ethical dimensions of engineering decisions, teaching professional responsibility, or reviewing designs for safety and public welfare.
Engineering is a profession of public trust. Engineers design the bridges people drive across, the buildings people live in, the aircraft people fly in, and the software that controls medical devices. When engineering fails, people die. Engineering ethics is not an abstract philosophical exercise -- it is the operational framework that prevents harm, guides difficult decisions under pressure, and defines the professional identity of the engineer. This skill covers codes of ethics, case studies of ethical failure, the duty to dissent, and the integration of ethical reasoning into the design process.
Agent affinity: brunel (design review leadership, integrated accountability), roebling (structural safety, public infrastructure)
Concept IDs: engr-codes-of-ethics, engr-safety-risk, engr-environmental-impact, engr-inclusive-design
The National Society of Professional Engineers (NSPE) Code of Ethics begins:
"Engineers, in the fulfillment of their professional duties, shall hold paramount the safety, health, and welfare of the public."
This is Canon 1, and it overrides all other professional obligations. When safety conflicts with schedule, budget, or management direction, safety wins. This is not aspirational -- it is the defining obligation of the profession.
Canadian engineers receive an iron ring upon graduation, worn on the working hand's little finger. It symbolizes the engineer's obligation to live by a high standard of professional conduct. The ring is a physical reminder -- every time you pick up a pen or a tool, you see it.
The American equivalent of the iron ring. Engineers take an oath: "I shall not undertake... any work which I believe will be of harm to the welfare or safety of the public."
Space Shuttle Challenger broke apart 73 seconds after launch on January 28, 1986, killing all seven crew members. The failure was caused by O-ring seal erosion in the right solid rocket booster, exacerbated by cold launch-day temperatures (36 degrees F, well below the O-ring qualification range).
Engineers at Morton Thiokol (the SRB manufacturer) recommended against launch. Roger Boisjoly and Allan McDonald presented data showing O-ring erosion at temperatures below 53 degrees F. NASA managers pushed back, asking Thiokol to reconsider. Under pressure, Thiokol management overrode their engineers and recommended launch.
Boisjoly became a whistleblower advocate. He spent the rest of his career teaching engineering ethics. He was awarded the Prize for Scientific Freedom and Responsibility by the AAAS in 1988.
Space Shuttle Columbia disintegrated during re-entry on February 1, 2003, killing all seven crew members. Foam insulation from the external tank struck the left wing's leading edge during launch, creating a breach. During re-entry, superheated gas entered the wing through the breach and caused structural failure.
Engineers at NASA requested imaging of the wing in orbit (satellite or ground-based telescope) to assess damage. Management declined the request, judging the foam strike as a "turnaround issue" rather than a safety-of-flight concern. The Columbia Accident Investigation Board (CAIB) found that NASA's organizational culture had normalized deviations from design specifications -- foam strikes had occurred on previous flights without catastrophic failure, so they were reclassified from "anomaly" to "accepted risk."
Two suspended walkways in the Kansas City Hyatt Regency hotel collapsed during a dance, killing 114 people and injuring 216. The original design used a single continuous rod from the ceiling through both walkway levels. During construction, the connection was changed to two separate rods (offset connection), which doubled the load on the upper walkway's connection. The connection failed under the weight of dancers.
The design change was made for constructability (the original continuous rod was difficult to thread through both walkways). The change was communicated by telephone and was not formally reviewed by the engineer of record. The engineer of record's professional engineering license was revoked.
The Therac-25 radiation therapy machine delivered massive radiation overdoses to six patients, killing three, due to software errors combined with the removal of hardware safety interlocks present in earlier models.
The manufacturer (AECL) removed hardware safety interlocks from earlier Therac models, relying entirely on software for safety. When a race condition in the software allowed the high-energy beam to fire without the beam spreader in place, there was no physical failsafe to prevent overdose. The manufacturer initially dismissed reports, attributing incidents to operator error.
An engineer has an obligation to speak up when:
Whistleblowers face real consequences: reassignment, demotion, termination, ostracism. Boisjoly was isolated at Thiokol after Challenger. This is why organizational culture matters -- an organization that punishes dissent will suppress the very signals it needs to prevent disaster.
Engineers have an obligation to communicate risk accurately. This means:
The factor of safety (structural-analysis skill) is simultaneously a technical and ethical choice. A low FOS reduces cost but increases risk. A high FOS increases safety but consumes more resources. The engineer who selects the FOS is making a value judgment about the acceptable probability of harm, informed by codes but ultimately an exercise of professional judgment.
Engineering ethics extends beyond preventing catastrophic failure to ensuring that designs serve all users: