Draft Bill Amending the Cybersecurity Act Submitted in Connection with NIS2
A draft bill to amend and supplement the Bulgarian Cybersecurity Act has been submitted to the Bulgarian National Assembly. The main goal of the bill is to strengthen Bulgaria’s cyberspace protection and establish a more effective, resilient system for preventing and responding to cyberattacks.
The proposed amendments reflect Bulgaria’s commitments as a European Union Member State to transpose Directive (EU) 2022/2555 (NIS2), which sets measures for a high common level of cybersecurity across the EU.
The bill expands the scope of the Cybersecurity Act to include new sectors and types of organisations critical to society and the economy. It introduces stricter requirements for risk management, cyber incident reporting, and strengthens the responsibilities of competent authorities.
It also outlines Bulgaria’s participation in the European Cyber Crisis Liaison Organisation Network (EU-CyCLONe), designed to support coordinated management of large-scale cyber incidents and crises across the EU. Additionally, the bill provides for the creation of a national framework for crisis management in cybersecurity.
Key measures include ensuring business continuity during cyberattacks, faster and more structured incident reporting, and enhanced international and European cooperation in cybersecurity.
The adoption of these amendments is expected to improve protection of critical infrastructure, businesses, public institutions, and citizens, while aligning Bulgarian legislation more closely with the European cybersecurity framework amid growing cyber threats.
Directive (EU) 2022/2555 - EUR-Lex (europa.eu)
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
