John is concerned about a possible conflict of interest from a consulting side job.

Potential conflicts of interest must be evaluated against the organization’s internal code of ethics. While professional codes (like ISC2) are important, employment-related decisions are governed primarily by organizational ethics and HR policies.