Phishing Simulations for EmployeesBulgarian Cybersecurity Act and NIS2: The Directive requires basic cyber hygiene practices and cybersecurity training (Article 21), as well as training for management (Article 20). ISO/IEC 27001: Control A.6.3 requires information security awarenes...
Bulgarian Cybersecurity ActBulgarian Cybersecurity Act (promulgated in State Gazette No. 94 of 13 November 2018, as amended and supplemented, SG No. 17 of 13 February 2026) is the principal legislative act governing the protection of network and i...
Ordinance on the Minimum Requirements for Network and Information SecurityBulgarian Cybersecurity Act; Incident notification template (Annex No. 7); Incident classification and prioritisation (Annex No. 9); Roles and responsibilities of units and employees responsible for network and information security (A...
NIS2 (DIRECTIVE (EU) 2022/2555)Bulgarian Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, introducing new and significantly stricter requirements. NIS2 sets out the core framework for cybersecurity risk management measures and reporting obligations acro...
NIS2 Registration in Bulgaria: Who Is Required to Register and What Are the Requirements?The transposition of Directive (EU) 2022/2555 (NIS2) into Bulgarian law expands the range of organisations subject to cy...
How ISO/IEC 27001 Supports Compliance with the Bulgarian Cybersecurity Act (NIS2)With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
Parliament Adopted at Second Reading Amendments to the Cybersecurity Act in Connection with
NIS 2After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
Cybersecurity Act Amended(promulgated in the State Gazette, No. 25 of 29 March 2022) In State Gazette, No. 25 of 29 March 2022, an amendment t...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
