CONSEJO LTD +359 2 408 5566 office@CONSEJO.bg 91 Aleksandar Malinov Blvd., 1715 Sofia, Bulgaria ...
CONSEJO Ltd. is a consulting company with more than 20 years of practical experience in the development, implementation and maintenance of management systems and in supporting organizations in achieving compliance with international standards and reg...
CONSEJO? Choosing the right consulting partner when implementing a management system has a direct impact on the quality of the final outcome. A well-managed implementation project involves much more than preparing documentation. It requires analysin...
CONSEJO Ltd. is a controller of personally identifiable information (PII), according to the meaning of the REGULATION (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement...
CONSEJO... This site uses cookies. We use cookies to personalize content and ads, provide social media features, and analyse our traffic. We also share information about how you use our site with your social media partners, advertising partners, and analytics p...
CONSEJO includes identification of the current business model, development and implementation of Management Systems (MS) and the Integrated Management System (IMS) based on International standards: ISO 9001 Quเlity management systems. Requ...
CONSEJO provides professional consulting services for revising and upgrading existing Management System documentation in line with the requirements of the new version of the standard. We support organizations in achieving a smooth transition, improv...
CONSEJO OFFERS THE FOLLOWING CONSULTANCY SERVICES IN MAINTENANCE MANAGEMENT SYSTEMS Update of the document management system through amendments caused by internal or external factors; Perform internal audits; Assistance in the preparation a...
CONSEJO Ltd., assesses the current state of information security within the organization with respect to data protection. This assessment is conducted through the implementation of best practices in information security management, in accordance with...
CONSEJO takes care to prevent possible breaches by identifying threats and provide effective methods to eliminate vulnerabilities before malicious individuals manage to exploit them. We are able to do penetration tests, analyzing your networks and de...
CONSEJO... THE STAGES OF CONSULTATION ON GDRP REQUIREMENTS CAN BE CONDITIONALLY DIVIDED INTO: GAP analysis and assessment of the current level of compliance; preparation of rules and procedures for implementation of the requirements of GDRP; assista...
CONSEJO conducts controlled phishing campaigns that resemble real attacks but do not cause harm. After the campaign, you receive a clear report showing how many employees opened the message, how many clicked, how many entered data and how many report...
CONSEJO offers, as a further service, performing internal audit of management systems (MS) according to ISO 9001, ISO 14001, ISO 20000-1, ISO/IEC 27001, ISO 28000, ISO 45001, ISO 50001, ISO 22000, IFS, BRCGS, e...
CONSEJO offers professional support for third-party audits, providing expert assistance and consultations to its clients. Our team of highly qualified experts has extensive experience in supporting organizations throughout the audit process, ensuring...
CONSEJO offers professional compliance assessment services tailored to companies from various industries aiming to ensure compliance with applicable regulatory requirements. Our team of experts provides comprehensive support in identifying and analyz...
CONSEJO provides consulting services for implementing the requirements of NATO AQAP standards and preparing companies in the defence industry for conformity assessment and certification. AQAP (Allied Quality Assurance Publications) are NATO publicat...
CONSEJO... What is ISO 9001? ISO 9001 is an international standard that specifies requirements for quality management systems. It provides a framework for managing processes and supports organizations in consistently providing products and services that meet c...
CONSEJO... What is ISO 13485? ISO 13485:2016 (BDS EN ISO 13485:2016, with applicable amendments) is an international standard that specifies requirements for quality management systems of organizations involved in one or more stages of the life cycle of medica...
CONSEJO help? CONSEJO supports organizations at all stages of ISO 14001 implementation, transition and maintenance: • analysis of the current state, including gap analysis; • transition to the new version of the EMS; • staff t...
CONSEJO... ISO/IEC 20000 Information technology. Service management reduces operational risk, meets contractual requirements and demonstrates the quality of services provided at an optimized price. ISO/IEC 20000-1 is a standard for man...
CONSEJO... Scope: The international standard ISO 22000 defines the requirements for the food safety management system in the food chain, when an organization must demonstrate its ability to control food hazards to ensure that each food product is ...
CONSEJO... ISO 22301 defines the requirements for the development and implementation of an efficient Business continuity management system (BCMS). ISO 22301 describes the main elements of managing business continuity: Planning, establishin...
CONSEJO provides consulting services for the development and implementation of information security management systems in accordance with ISO/IEC 27001 — from the initial gap analysis and identification of the necessary actions through to prepa...
CONSEJO... As businesses increasingly rely on cloud technologies, data protection has become a critical priority for every organization. While cloud services offer significant benefits, they also introduce risks related to safeguarding sensitive information. To...
CONSEJO Can Help CONSEJO supports organizations in implementing and applying international standards for information security and personal data protection. Our team offers: readiness assessments for the implementation of ISO/IEC 27018:2025;...
CONSEJO... What is ISO/IEC 27032? ISO/IEC 27032:2023 is an international standard that provides guidelines for improving internet security as part of the broader cybersecurity framework. It addresses key risks and threats in the digital environment by offeri...
CONSEJO... Many organizations are experiencing growing uncertainty and instability in the security of business processes, including supply. As a result, they face problems affecting the achievement of their business goals. Systematic approach to solving...
CONSEJO can support you CONSEJO provides comprehensive support for the implementation and maintenance of ISO 37001, including: analysis of the organizational context and bribery risk assessment; development and customization of policies, ...
CONSEJO... IATF 16949 is the most widespread standard in the automotive sector. IATF 16949 is a joint development of the International Automotive Task Force – IATF, and the National Automotive Industry Associations – AIAG (US). This standard s supe...
CONSEJO... NIST SP 800-53 Security and Privacy Controls for Information Systems and Organizations is part of the SP 800 group of standards, containing more than 1300 documents of the National Institute of Standards and Technology (NIST), USA. It was developed b...
CONSEJO Can Support You CONSEJO provides consulting and professional support for: FSSC 22000 implementation; transition to FSSC 22000 Version 7; development and updating of documentation; GAP analysis; internal audits; team trai...
CONSEJO... Scope ISO 45001 is an international standard that defines the requirements for an occupational health and safety (OHS) management system. The standard gives guidance to any organization to improve its performance in preventing work-related inju...
CONSEJO prepares the organization for the audit and provides support throughout the entire procedure. Have the EU AI Act deadlines been postponed? Partially. The obligations for high-risk AI systems were postponed until 2 December 2027 for Annex II...
CONSEJO... CHALLENGES FOR BUSINESSES IN IMPLEMENTING THE REQUIREMENTS OF THE EUROPEAN LEGAL FRAMEWORK, APPLICABLE AFTER 25 MAY 2018 The development of information technologies and international trade in recent decades has created ...
CONSEJO Can Support You The CONSEJO team provides expert support in: conducting a IT audit; developing and implementing policies and procedures; preparing for audits and inspections; training management and expert personnel. ㈇...
CONSEJO... (Promulgated in State Gazette No. 59 of 26 July 2019, amended SG No. 36 of 13 May 2022, amended SG No. 47 of 24 June 2022) What you need to know The Ordinance sets out specific requirements for ensuring network and information securi...
CONSEJO Can Assist The CONSEJO team provides professional consultancy services related to the application of the Law, including: establishment and implementation of internal reporting channels; development of internal rules and registers; ...
CONSEJO... Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (the EU AI Act) is the European Union's first comprehensive legal framework for artificial intelligenc...
CONSEJO... AQAP (Allied Quality Assurance Publications) are NATO publications that specify quality assurance requirements for contracts involving the supply of defence-related products and services. AQAP standards are used in the defence industry and supply ch...
CONSEJO... The International Standard ISO 50001 focuses on supporting organizations in their efforts to establish systems and processes necessary for better energy performance including energy efficiency, energy use and energy consumption. Implemen...
CONSEJO... IFS Food is an international standard for evaluating the conformity of products and processes with respect to food safety and quality. It applies to suppliers at all stages of food processing after agricultural production. IFS Food belongs to the IFS...
CONSEJO... EurepGAP starts in 1997. It has replaced by GLOBALG.A.P. – the brand developed by FoodPLUS GmbH, Germany. Almost three decades later GLOBALG.A.P. is integrated standard with modular applications for different product groups, rang...
CONSEJO has experienced consultants who can suggest customized solutions suitable for your organization. We will help you prepare the necessary documentation and identify areas where you need to improve processes and implement risk management me...
CONSEJO has many years of experience in providing sustainable development consulting services. We have an expert team with extensive experience in environmental management and specialise in assisting organisations of all sizes and sectors with EMAS r...
CONSEJO... Companies are facing a growing threat environment, making information and data security a top priority. A data breach can cost millions, not to mention the reputational damage and loss of customer trust. Cybersecurity requires defining frameworks...
CONSEJO... What is TISAX? TISAX (Trusted Information Security Assessment Exchange) is a mechanism for assessing and mutually recognising information security assessment results within the automotive industry. TISAX was developed on the initiative of the Ger...
CONSEJO team can consult your organization before and during a SMETA audit, helping you to prepare, collect, and store the necessary information. We will help you align your organization with SMETA criteria and maintain your ethical business practice...
CONSEJO Support You? The CONSEJO team can support you in preparing for an EcoVadis assessment and identifying opportunities to improve your sustainability management system. Together with your team, we can review existing policies, procedures, re...
CONSEJO... ISO 26000 provides guidance for organizations wishing to implement and maintain socially responsible policies and practices, and ways to integrate socially responsible behaviour into the organization. There is a growing need and expectation for ...
CONSEJO supports organizations in the development, implementation and improvement of quality management systems. Consulting services may include an assessment of the current state, determination of applicable requirements, development of the necessar...
CONSEJO... What is an environmental management system? Part of the overall management system which includes organizational structure, planning activities, responsibilities, methods, procedures, processes and resources for the development, implementation, e...
CONSEJO... Information Security Management System (ISMS) is a management approach for organization's sensitive information in a way that ensures its security. This information can be company property (know-how, personal information, etc.) or customer ...
CONSEJO, we believe that sustainability is the key to the long-term success of any organization. Our team provides expert support for implementing leading standards and best practices related to corporate sustainability, social responsibility, and en...
CONSEJO... What is an occupational health and safety management system (OH&SMS)? OH&SMS is part of the management system of an organization. It develops and implements the policy of occupational health and safety and manage the risks to health ...
CONSEJO... A food safety management system is an organised set of processes, procedures and rules designed to ensure that food products are safe for consumption. This system includes a set of measures that are implemented by food manufacturers, suppliers and tr...
CONSEJO CONSEJO provides consulting services for the development, implementation, integration and maintenance of management systems in accordance with international standards. We support organisations in establishing new integrated management syste...
What additional requirements apply to suppliers in the defence industry? For companies with a quality management syst...
Changing a supplier may seem like a routine commercial decision, while extending a product's shelf life may be seen ...
The transposition of Directive (EU) 2022/2555 (NIS2) into Bulgarian law expands the range of organisations subject to cy...
NATO quality assurance requirements are of practical importance to Bulgarian companies that manufacture defence-related ...
Every October, Europe marks European Cybersecurity Month (ECSM), an annual European initiative to raise cybersecurity aw...
Ahead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
The digitalization of business processes, the use of cloud services, remote working, and the growing volume of informati...
On 16 September 2026, the International Organization for Standardization (ISO) officially published ISO 9001:2026 &ndash...
On 16 September, the world marks the International Day for the Preservation of the Ozone Layer. In 2026, the offici...
The International Organization for Standardization (ISO) will officially launch the new edition of the world’s mos...
The new edition of the world’s most widely used international standard for quality management systems – ISO ...
The European Commission has presented the European Technological Sovereignty Package, one of the most significant initia...
As of today, 2 August 2026, Regulation (EU) 2024/1689 on Artificial Intelligence (the EU AI Act) reaches another key imp...
The German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
In April 2026, the International Organization for Standardization published the new edition of ISO 14001 &ndas...
The new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
On 7 June, the world marks World Food Safety Day – an initiative of the World Health Organization and the Food and...
The International Organization for Standardization (ISO) has published ISO 32212:2026 — a new international s...
After 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
On 15 April 2026, ISO published the fourth edition of ISO 14001 — the world's most widely adopted in...
In April 2026, the official publication of the new version of the international standard ISO 14001:2026 is expected...
With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
The quality of tourism services provided at coastal and other beaches depends on multiple factors, including safety, inf...
Regulation (EU) 2024/2847 – better known as the Cyber Resilience Act (CRA) – is now part of the le...
With the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
On 10 February 2026, on the occasion of Safer Internet Day, the European Commission presented the EU Action Pla...
10 February 2026 — Today marks Safer Internet Day – a global initiative that promotes the safer, more respon...
After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
Today, organizations are facing increasing environmental challenges, including climate change, biodiversity loss, resour...
In recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
Artificial intelligence (AI) is increasingly recognised as a key driver of economic growth, digital transformation, and ...
In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
2025 established itself as a year of significant change in the fields of management standards, information security...
With the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
With the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
Stay ahead of requirements and protect your certification Revisions to standards are a natural part of continuous imp...
The International Organization for Standardization (ISO) is in a decisive phase of revising the world’s most ...
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
On 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
In 2025, the International Organization for Standardization (ISO) published some of the most significant chang...
In the world of quality management, continual improvement is not merely a goal but a fundamental principle. The intern...
New Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
August 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
In August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
Double the Power for Your Information Security With over a decade of consultancy experience and dozens of successfu...
On July 30, 2025, the European Commission adopted a recommendation on the Voluntary Sustainability Reporting Standard (V...
A new standard helps small and medium-sized enterprises meet sustainability requirements with reduced bureaucracy. ...
The Montreal Protocol on Substances that Deplete the Ozone Layer is one of the most significant international agreements...
ISO 14064 is a series of international standards developed by the International Organization for Standardization (I...
Security, stability, and trust in institutions are fundamental to any democratic society. Among these institutions, poli...
We inform you that on May 14, 2025, IFS officially introduced the updated IFS ESG Compliance Check tool – part of ...
In the State Gazette, Issue No. 38 of 2025, amendments and supplements to the Law on the Protection of Persons Reporting...
In the digital age, cybersecurity is a key element for the success of any organization. With the increasing threat of ...
On March 18, 2025, the second edition of the conference "ALSO Leading the way: New Era of AI and Cybersecurity"...
In 2024, the global economy saw a growth of 3.2% compared to the previous year, reaching approximately 105 t...
With the amendments to the Accounting Act of August 2024 (State Gazette, 72 of 2024, effective 6 July 2024), Bulg...
In today’s world, sustainable development and responsible resource use are key priorities for businesses and soc...
On 26 February 2025, the European Commission published the Omnibus I proposal (COM(2025)80), proposing a postponement of...
The draft amendments to the Bulgarian Cybersecurity Act aim to transpose Directive (EU) 2022/2555 (known as the NIS2 D...
In today’s business landscape, sustainable development and environmental responsibility are key drivers of long-...
In February 2025, the new standard ISO 59040:2025 – Circular Economy – Product Circularity Data Sheet was ...
A draft bill to amend and supplement the Bulgarian Cybersecurity Act has been submitted to the Bulgarian National A...
Regulation (EU) 2024/2847 of the European Parliament and of the Council, better known as the Cyber Resilience Act (CRA),...
Whether it’s an attempt to breach the network or a complete shutdown of information systems, cyber-attacks are hig...
Regulation (EU) 2022/2554, known as the Digital Operational Resilience Act (DORA), will take effect on January 17, ...
Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI) sets out a framework for the deve...
At a meeting of the Council of Ministers held on 03.07.2024, the government approved draft laws amending and supplementi...
What organisations should do about Amendment 1: Climate change changes to ISO 9001, ISO 14001, ISO 4500...
On 13 June 2024, the European Parliament and the Council adopted Directive (EU) 2024/1760 on corporate sustainability du...
In the context of growing global awareness of climate change and sustainability, the terms 'corporate responsibili...
Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...
Late last week, the International Organization for Standardization (ISO) announced the introduction of amendments to a n...
The European Environmental Management and Audit Scheme (EMAS) is a voluntary EU scheme for companies and org...
The first audits under IFS Food version 8 start on 1 October 2023. Version 7 audits can be conducted until the end of De...
Earlier this week, the Bulgarian Standards Institute published BDS ISO/IEC 27035-1:2023 Information technology. Informat...
The automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
Commitments to achieve net zero emissions are increasing among companies, financial institutions, cities, regions and ot...
The WLA Security Control Standard (WLA SCS) is an information security management framework developed by the World Lotte...
FSSC 22000 is an internationally recognized food safety audit and certification scheme for organizations in the food sup...
SMETA (SEDEX Members Ethical Trade Audit) is a widely recognized audit to assess the social and ethical performance of s...
WORLD METROLOGY DAY We celebrate World Metrology Day every year on May 20 to highlight the importance of metr...
Good distribution practice (GDP) is a quality system for warehouses and distribution centres that handle medicines. GDP ...
ISO/SAE 21434:2021 is an international standard that addresses cyber security in the engineering of electrical and ...
CHANGES IN MANAGEMENT SYSTEMS In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
The Law on protection of persons reporting or publicly disclosing information on breaches (the "Whistleblowing&nb...
The Council of the EU has agreed on its position on the European Commission's proposal for a Directive on corporat...
New developments in cyber security threats have pushed companies to look for new ways to protect themselves and their ...
Municipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
In October 2022, the new edition of ISO/IEC 27005, Information security, cybersecurity and privacy protection — Gu...
ISO has published the new version of ISO/IEC 27001 under the title "Information security, cybersecurity and pr...
EU is giving 30 600 000 of financial assistance in support of procedure BG-RRP-3.005 “Improving Information and ...
PCI SSC released the latest update to the PCI Data Security Standard (PCI DSS) in late March this year. PCI DSS (Pa...
On 15.03.2022 ISO published a new version of the standard ISO 28000:2022 Security and resilience — Security manage...
(promulgated in the State Gazette, No. 25 of 29 March 2022) In State Gazette, No. 25 of 29 March 2022, an amendment t...
In State Gazette, No. 25 of 29 March 2022, amendments to the Cybersecurity Act were promulgated. These amendments intr...
On 15 February 2022 the international organization ISO published the new version of ISO/IEC 27002 "Information...
On 30 June 2021, Regulation (EU) 2021/1119 of the European Parliament and of the Council was adopted, establishing a leg...
On 30 June 2021, the European Union adopted Regulation (EU) 2021/1119, known as the European Climate Law, establishing a...
At the end of 2019, the European Commission presented the European Green Deal – a comprehensive strategic framewor...
TISAX is an assessment and exchange mechanism for the information security of enterprises in the automotive supply chain...
At the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
The world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
Protecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
With the eyes of the world on the 2014 Olympic Games in Sochi, hundreds of ISO standards will make the games a safe and ...
ISO 9001, Quality Management Systems - Requirements, has reached the Committee Draft stage of the revision process. Like...
IFS would like to inform you about modifications in the IFS Food Standard. These updates apply from 1st April 2013. T...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































