A controller catches the CFO booking a $400K "consulting accrual" two days before quarter-end with no invoice and no contract. What the controller does in the next hour is what business ethics is about: a framework for choosing when policy is silent and the pressure is real.
Business ethics is the application of moral principles to commercial conduct. It picks up where the law stops. A transaction can be legal but unethical (an undisclosed conflict of interest that violates no statute) or, less often, ethical but illegal. The exam frames ethics as a decision-support framework: when policy is silent, the pillars below tell you what to do.
KEY: Compliance asks "is it allowed?" Ethics asks "is it right?" The CMA exam tests the second question.
Fairness. Treat similarly situated people similarly. Apply the same vendor-selection criteria to your in-law's firm as to a stranger. Allocate overhead by the same rule across product lines, even when one is your division's flagship. The test: would a disinterested observer see one standard applied to everyone?
Common mistakes
- Treating "legal" and "ethical" as synonyms. A transaction can satisfy GAAP and still fail the integrity pillar. The exam often pairs a technically permissible accounting choice with deceptive intent; the answer is unethical regardless of legality.
- Confusing duty of care with duty of loyalty. Care is competence and diligence (read the contract). Loyalty is no self-dealing (do not steer the contract to your cousin). Most fiduciary breaches on the exam are loyalty failures.
- Misranking the two fraud families. Asset misappropriation is most frequent; financial-statement fraud has the highest median loss per case. The reverse pairing is a standard distractor.
Bottom line
- Business ethics applies moral principles (honesty, fairness, accountability) to commercial conduct; a transaction can be legal yet unethical.
- Four operating pillars: fairness (consistent treatment), integrity (act matches word), due diligence (reasonable care before commitment), fiduciary responsibility (beneficiary first).
- Fiduciary duty splits into duty of care (competence and diligence) and duty of loyalty (no self-dealing).
- Conflicts of interest require disclose and recuse; disclosure alone fails the loyalty test.
Exam shortcut
When the stem pits a manager's instruction against accurate reporting, the answer is refuse and escalate. Documenting the refusal is the second-best alternative; silent compliance is never correct. When the stem describes a P.O.-box vendor with round-dollar sequential invoices and no web presence, the answer is shell-vendor (fake supplier) fraud. The control is vendor-master review plus address-match to the employee file.
The full lesson (about 2,026 words, 14 min read) adds 2 worked examples, all 5 common mistakes, a self-check, free in the app.
Learning objectives
- 2F1
Browse all free CMA Part 2 lessons or jump into free CMA Part 2 practice questions.