Cybersecurity Act Amended
(promulgated in the State Gazette, No. 25 of 29 March 2022)In State Gazette, No. 25 of 29 March 2022, an amendment to the Bulgarian Cybersecurity Act was promulgated, affecting the annexes to the Act that are used to determine the sectors and services falling within the scope of the network and information security regime.
With the promulgated amendment, Annex No. 1 to Article 4(1)(2) of the Cybersecurity Act was amended (effective as of 29 March 2022).
The annex forms part of the regulatory framework used to determine the sectors and services subject to the network and information security regime, as well as for the identification of operators of essential services.
Impact on organisations
Organisations whose activities fall within the sectors and/or services listed in the annexes to the Act should take into account that the amendments to the annex may be relevant when assessing whether the requirements of the Cybersecurity Act apply to them, including related obligations concerning security measures and incident management, under the general framework of the Act.
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
