Your rating 0 from 0 votes
30 results found for "Cybersecurity" in pages:
About usCybersecurity... CONSEJO Ltd. is a consulting company with more than 20 years of practical experience in the development, implementation and maintenance of management systems and in supporting organizations in achieving compliance with international standards and reg...
Why to choose CONSEJO?Cybersecurity... Why Choose CONSEJO? Choosing the right consulting partner when implementing a management system has a direct impact on the quality of the final outcome. A well-managed implementation project involves much more than preparing documentation. It requ...
Implementation of management standardsCybersecurity and Privacy Protection – Information Security Management Systems – Requirements ISO 28000 Security and resilience. Security management systems. Requirements ISO 45001 Occupational health and safety management systems. Re...
Revising and improving implemented standardsCybersecurity... REVISING AND IMPROVING IMPLEMENTED STANDARDS Standardization and compliance organizations periodically review and update the content of published standards, schemes, and specifications to align them with the evolving business environment. All c...
IT audit (Information systems audit)Cybersecurity Act, the Regulation on Minimum Network and Information Security Requirements, Directive (EU) 2022/2555 (NIS 2 Directive) and international standards such as ISO/IEC 27001, ISO/IEC 27002, NIST, TISAX and others. ...
Testing of Security of Information SystemsCybersecurity... NETWORK PENETRATION TESTING Penetration test is a methods and techniques to gain access to information systems. Its main goal is to identify the presence of vulnerabilities allowing malicious people to establish access to your systems and personal a...
Implementation of the GDPR (Regulation 2016/679)Cybersecurity... THE STAGES OF CONSULTATION ON GDRP REQUIREMENTS CAN BE CONDITIONALLY DIVIDED INTO: GAP analysis and assessment of the current level of compliance; preparation of rules and procedures for implementation of the requirements of GDRP; assista...
Phishing Simulations for EmployeesCybersecurity Act and NIS2: The Directive requires basic cyber hygiene practices and Cybersecurity training (Article 21), as well as training for management (Article 20). ISO/IEC 27001: Control A.6.3 requires information security awareness, educati...
ISO 14001 Environmental management systemsCybersecurity... What is ISO 14001? ISO 14001 defines the requirements for an environmental management system (EMS), which can be integrated with other management requirements to help organizations achieve both their economic and environmental objectives. ...
ISO 20000-1 Service managementCybersecurity... ISO/IEC 20000 Information technology. Service management reduces operational risk, meets contractual requirements and demonstrates the quality of services provided at an optimized price. ISO/IEC 20000-1 is a standard for man...
ISO 22301 Business continuity management systemsCybersecurity... ISO 22301 defines the requirements for the development and implementation of an efficient Business continuity management system (BCMS). ISO 22301 describes the main elements of managing business continuity: Planning, establishin...
ISO/IEC 27001 Cybersecurity and Privacy ProtectionCybersecurity... ISO/IEC 27001 is an international standard that specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS). The standard provides a framework for systematically...
ISO/IEC 27017:2015 Code of practice for information security controlsCybersecurity... As businesses increasingly rely on cloud technologies, data protection has become a critical priority for every organization. While cloud services offer significant benefits, they also introduce risks related to safeguarding sensitive information. To...
ISO/IEC 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processorsCybersecurity... ISO/IEC 27018:2025 is an international standard that provides guidelines for the protection of Personally Identifiable Information (PII) in the use of public cloud services. It is part of the ISO/IEC 27000 family of standards and is in...
ISO/IEC 27032 Guidelines for Internet securityCybersecurity and Internet Security: The standard examines the relationship between Cybersecurity, web security, network security, and Internet security, emphasizing risk management in the online environment. Threats and Vulnerabilities: It describ...
NIST SP 800-53Cybersecurity... NIST SP 800-53 Security and Privacy Controls for Information Systems and Organizations is part of the SP 800 group of standards, containing more than 1300 documents of the National Institute of Standards and Technology (NIST), USA. It was developed b...
ISO 21434 Road vehicles Cybersecurity engineeringCybersecurity engineering specifies the engineering requirements for Cybersecurity risk management in relation to the conception, product development, manufacture, operation, maintenance and decommissioning of electrical and electronic (E/E) systems ...
ISO/IEC 42001 Artificial intelligenceCybersecurity... ISO/IEC 42001:2023 is the first international standard for artificial intelligence management systems. It provides organizations that develop, provide or use AI systems with a structured and auditable model for the responsible management of artificia...
ISO/IEC 27701 Information security, Cybersecurity and privacy protectionCybersecurity... In 2025, the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) published the new edition of ISO/IEC 27701:2025 — Information security, Cybersecurity and priv...
GDPR (General Data Protection Regulation)Cybersecurity... CHALLENGES FOR BUSINESSES IN IMPLEMENTING THE REQUIREMENTS OF THE EUROPEAN LEGAL FRAMEWORK, APPLICABLE AFTER 25 MAY 2018 The development of information technologies and international trade in recent decades has created ...
Bulgarian Cybersecurity ActCybersecurity Act (promulgated in State Gazette No. 94 of 13 November 2018, as amended and supplemented, SG No. 17 of 13 February 2026) is the principal legislative act governing the protection of network and information...
Ordinance on the Minimum Requirements for Network and Information SecurityCybersecurity Act, with regard to the network and information systems used for the provision of essential services; Digital service providers within the meaning of the Cybersecurity Act, with regard to the network and information systems used for t...
Regulation (EU) 2024/1689Cybersecurity... Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (the EU AI Act) is the European Union's first comprehensive legal framework for artificial intelligenc...
SOC 2 (Service Organisation Control Type 2)Cybersecurity requires defining frameworks – guiding principles and best practices that companies must follow to ensure information security. SOC 2, or Service Organization Control Type 2, is an auditing and attestation framework deve...
TISAX (Trusted Information Security Assessment Exchange)Cybersecurity... What is TISAX? TISAX (Trusted Information Security Assessment Exchange) is a mechanism for assessing and mutually recognising information security assessment results within the automotive industry. TISAX was developed on the initiative of the Ger...
NIS2 (DIRECTIVE (EU) 2022/2555)Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, introducing new and significantly stricter requirements. NIS2 sets out the core framework for Cybersecurity risk management measures and reporting obligations across all sec...
DORA (Regulation (EU) 2022/2554)Cybersecurity: - Implement a robust Cybersecurity strategy to protect against cyber threats. - Conduct resilience testing, including advanced testing for significant entities, to evaluate the organization's ability to effectively respond to and...
CYBER ESSENTIALSCybersecurity... Cyber Essentials is the UK’s government-backed Cybersecurity certification scheme, managed by the National Cyber Security Centre (NCSC) and the Department for Science, Innovation and Technology (DSIT). Its purpose is to help organisatio...
Cybersecurity, Information SecurityCybersecurity... Information Security Management System (ISMS) is a management approach for organization's sensitive information in a way that ensures its security. This information can be company property (know-how, personal information, etc.) or customer ...
Integrated Management SystemCybersecurity... What is an Integrated Management System (IMS)? An Integrated Management System (IMS) integrates the requirements of two or more management system standards into a unified management framework. It enables an organisation to manage its processes, risk...
65 results found for "Cybersecurity" in news:
NIS2 Registration in Bulgaria: Who Is Required to Register and What Are the Requirements?The transposition of Directive (EU) 2022/2555 (NIS2) into Bulgarian law expands the range of organisations subject to cy...
European Cybersecurity Month 2026: Are Employees Prepared for Cyber Threats?Every October, Europe marks European Cybersecurity Month (ECSM), an annual European initiative to raise Cybersecurity aw...
The Human Factor in Information Security: Why Technology Is Not EnoughAhead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
European Cybersecurity Month 2026: The Human Factor in FocusToday, the Court of Justice of the European Union in Luxembourg is hosting the official kick-off event for European Cybe...
Information Security and Cybersecurity Is There a Difference?The digitalization of business processes, the use of cloud services, remote working, and the growing volume of informati...
European Commission Presents the European Technological Sovereignty PackageThe European Commission has presented the European Technological Sovereignty Package, one of the most significant initia...
New EU AI Act Requirements Take Effect TodayAs of today, 2 August 2026, Regulation (EU) 2024/1689 on Artificial Intelligence (the EU AI Act) reaches another key imp...
VDA Releases the VDA ISA2027 CatalogueThe German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
Regulation (EU) 2024/1689 enters a new phase on 2 August 2026On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
NIST Cybersecurity Framework 2.0 (NIST CSF 2.0)The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
ISO 19011:2026: updated guidance for auditing management systemsThe new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
Ten Days Until Sanctions Under the Cybersecurity Act Apply in FullAfter 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
How ISO/IEC 27001 Supports Compliance with the Bulgarian Cybersecurity Act (NIS2)With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
Cyber Resilience Act and the New Model of Product Liability in the EURegulation (EU) 2024/2847 – better known as the Cyber Resilience Act (CRA) – is now part of the le...
Amendments to the Cybersecurity ActWith the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
Action Plan Against CyberbullyingOn 10 February 2026, on the occasion of Safer Internet Day, the European Commission presented the EU Action Pla...
Safer Internet Day 2026 Together for a Safer Online World10 February 2026 — Today marks Safer Internet Day – a global initiative that promotes the safer, more respon...
Parliament Adopted at Second Reading Amendments to the Cybersecurity Act in Connection with
NIS 2After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
Why ISO Standards Are Becoming Crucial in Public ProcurementIn recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
How to Choose the Right Consulting Organization?In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
Key Changes in International Standards and Regulatory Requirements in 20252025 established itself as a year of significant change in the fields of management standards, information security...
ISO/IEC 27071: Security and Trust Between Devices and ServicesWith the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
ISO/IEC 42005:2025 a standard for assessing the impact of artificial intelligence systemsWith the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
How to Prepare for the Transition to a New Version of a Standard?Stay ahead of requirements and protect your certification Revisions to standards are a natural part of continuous imp...
ISO/IEC 27701:2025 A New Era in Privacy ManagementISO/IEC 27701:2025 – Information security, Cybersecurity and privacy protection — Privacy information manage...
ISO/IEC 27701:2025 The New Standard for Privacy, AI and Cloud TechnologiesOn 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
European Cybersecurity Month 2025“GAME ON!” – Behavioral Change Towards Digital Threats October 2025 will once again be dedi...
ISO 54002:2025 The New Quality Management Standard for Police OrganizationsNew Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
ISO/IEC 27018:2025: Updated Guidelines for PII Protection in Cloud EnvironmentsIn August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, Cybersecurity a...
ISO/IEC 27018:2025 Enhanced Protection of Personal Data in the CloudAugust 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
NEW: Network and Information Security Specialist as a ServiceDouble the Power for Your Information Security With over a decade of consultancy experience and dozens of successfu...
ISO/IEC 27017 Information Security Standard for Cloud ServicesIn the era of digital transformation, an increasing number of organizations are shifting their operations, data, and...
How to Protect Your Data in the Digital AgeIn the digital age, Cybersecurity is a key element for the success of any organization. With the increasing threat of ...
Dimitar Saparevski Participates in Cybersecurity and Artificial Intelligence ConferenceOn March 18, 2025, the second edition of the conference "ALSO Leading the way: New Era of AI and Cybersecurity"...
If Cybercrime Were a Country, It Would Rank Third in GDP in 2024In 2024, the global economy saw a growth of 3.2% compared to the previous year, reaching approximately 105 t...
The Cybersecurity Bill Advances Towards Final AdoptionThe draft amendments to the Bulgarian Cybersecurity Act aim to transpose Directive (EU) 2022/2555 (known as the NIS2 D...
International Summit on AI Standards December 2025The first of its kind International Summit on AI Standards will take place on December 2-3, 2025, in Seoul. The initia...
Post-Quantum Cryptography: The Future of CybersecurityWith the development of quantum computers, traditional cryptographic algorithms such as RSA, ECC (Elliptic Curve Cryptog...
Draft Bill Amending the Cybersecurity Act Submitted in Connection with NIS2A draft bill to amend and supplement the Bulgarian Cybersecurity Act has been submitted to the Bulgarian National A...
Regulation (EU) 2024/2847 Cyber Resilience ActRegulation (EU) 2024/2847 of the European Parliament and of the Council, better known as the Cyber Resilience Act (CRA),...
Impact Analysis of Cyber AttacksWhether it’s an attempt to breach the network or a complete shutdown of information systems, cyber-attacks are hig...
DORA - New Cybersecurity Requirements in the EU Financial SectorRegulation (EU) 2022/2554, known as the Digital Operational Resilience Act (DORA), will take effect on January 17, ...
How NIS 2 relates to ISO/IEC 27001Directive (EU) 2022/2555 aims to strengthen Cybersecurity in the member states of the European Union and will come ...
What is ISMS and why do you need it?Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...
Amendment 1: Climate action changesLate last week, the International Organization for Standardization (ISO) announced the introduction of amendments to a n...
Differences between NIS and NIS 2 directivesThe European Union's Cybersecurity rules, introduced in 2016, have been updated by Directive (EU) 2022/2555 of ...
ISO/IEC 27035-1:2023 AND ISO/IEC 27035-2:2023 WITH NEW VERSIONSEarlier this week, the Bulgarian Standards Institute published BDS ISO/IEC 27035-1:2023 Information technology. Informat...
Standards for the protection of automotive securityThe automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
WLA Security Control Standard - security controls in the lottery industryThe WLA Security Control Standard (WLA SCS) is an information security management framework developed by the World Lotte...
ISO/SAE 21434:2021 Road vehicles Cybersecurity engineeringISO/SAE 21434:2021 is an international standard that addresses cyber security in the engineering of electrical and ...
Transition to the Requirements of ISO/IEC 27001:2022CHANGES IN MANAGEMENT SYSTEMS In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
When Do Municipal Enterprises Fall Under Cybersecurity RequirementsA Practical Assessment Test for the Management of Municipal Enterprises on the Applicability of the Cybersecurity Act an...
Regulatory Cybersecurity Obligations of Municipal EnterprisesMunicipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
ISO/IEC 27005:2022 What Has Changed in Information Security Risk ManagementIn October 2022, the new edition of ISO/IEC 27005, Information security, Cybersecurity and privacy protection — Gu...
ISฮ/IลC 27001:2022 has been publishedISO has published the new version of ISO/IEC 27001 under the title "Information security, Cybersecurity and pr...
Financial Assistance to Improve Information and Communication Technologies in Small and
Medium-sized EnterprisesEU is giving 30 600 000 of financial assistance in support of procedure BG-RRP-3.005 “Improving Information and ...
Upcoming version of ISO 27001: new controls from 2022Taking into account the rapidly changing Cybersecurity environment, ISOs are updating information security standards. Ea...
Amendments to the Cybersecurity Act Scope and Key AspectsIn State Gazette, No. 25 of 29 March 2022, amendments to the Cybersecurity Act were promulgated. These amendments intr...
Cybersecurity Act Amended(promulgated in the State Gazette, No. 25 of 29 March 2022) In State Gazette, No. 25 of 29 March 2022, an amendment t...
New version of ISO/IEC 27002On 15 February 2022 the international organization ISO published the new version of ISO/IEC 27002 "Information...
Cybersecurity in CarsNew standard just published to help keep the hackers at bay As our cars get more connected, the risk of Cybersecurity b...
The Guide for Auditors of Information Security Management Systems Has Been UpdatedAt the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
A new standard has been published to support the privacy information managementThe world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
An Updated Version of ISO/IEC 27005 Information Security Risk Management Has Been
PublishedProtecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
How to measure the effectiveness of Information Security?You simply can’t be too careful when it comes to information security. Protecting personal records and commerciall...
News
12
10.26
NATO Quality Assurance Standards Gain Attention in Defence Industry Investment
NATO quality assurance requirements are of practical importance to Bulgarian com...
25
09.26
European Cybersecurity Month 2026: The Human Factor in Focus
Today, the Court of Justice of the European Union in Luxembourg is hosting the o...
Accents
06
11.26
AQAP-2110: Beyond ISO 9001 Requirements
What additional requirements apply to suppliers in the defence industry?
For ...
20
10.26
Change Management in the Food Sector: When Is a New Risk Assessment Necessary?
Changing a supplier may seem like a routine commercial decision, while extending...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
Partners
