IT audit (Information systems audit)Cybersecurity Act, the Regulation on Minimum Network and Information Security Requirements, Directive (EU) 2022/2555 (NIS 2 Directive) and international standards such as ISO/IEC 27001, ISO/IEC 27002, NIST, TISAX and others. ...
Phishing Simulations for EmployeesCybersecurity Act and NIS2: The Directive requires basic cyber hygiene practices and cybersecurity training (Article 21), as well as training for management (Article 20). ISO/IEC 27001: Control A.6.3 requires information security awareness, educati...
Bulgarian Cybersecurity ActCybersecurity Act (promulgated in State Gazette No. 94 of 13 November 2018, as amended and supplemented, SG No. 17 of 13 February 2026) is the principal legislative act governing the protection of network and information...
Ordinance on the Minimum Requirements for Network and Information SecurityCybersecurity Act, with regard to the network and information systems used for the provision of essential services; Digital service providers within the meaning of the Cybersecurity Act, with regard to the network and information systems used for t...
NIS2 (DIRECTIVE (EU) 2022/2555)Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, introducing new and significantly stricter requirements. NIS2 sets out the core framework for cybersecurity risk management measures and reporting obligations across all sec...
NIS2 Registration in Bulgaria: Who Is Required to Register and What Are the Requirements?The transposition of Directive (EU) 2022/2555 (NIS2) into Bulgarian law expands the range of organisations subject to cy...
Information Security and Cybersecurity – Is There a Difference?The digitalization of business processes, the use of cloud services, remote working, and the growing volume of informati...
NIST Cybersecurity Framework 2.0 (NIST CSF 2.0)The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
Ten Days Until Sanctions Under the Cybersecurity Act Apply in FullAfter 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
How ISO/IEC 27001 Supports Compliance with the Bulgarian Cybersecurity Act (NIS2)With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
Amendments to the Cybersecurity ActWith the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
Parliament Adopted at Second Reading Amendments to the Cybersecurity Act in Connection with
NIS 2After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
The Cybersecurity Bill Advances Towards Final AdoptionThe draft amendments to the Bulgarian Cybersecurity Act aim to transpose Directive (EU) 2022/2555 (known as the NIS2 D...
Draft Bill Amending the Cybersecurity Act Submitted in Connection with NIS2A draft bill to amend and supplement the Bulgarian Cybersecurity Act has been submitted to the Bulgarian National A...
Regulation (EU) 2024/2847 – Cyber Resilience ActRegulation (EU) 2024/2847 of the European Parliament and of the Council, better known as the Cyber Resilience Act (CRA),...
When Do Municipal Enterprises Fall Under Cybersecurity RequirementsA Practical Assessment Test for the Management of Municipal Enterprises on the Applicability of the Cybersecurity Act an...
Regulatory Cybersecurity Obligations of Municipal EnterprisesMunicipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
Cybersecurity Act Amended(promulgated in the State Gazette, No. 25 of 29 March 2022) In State Gazette, No. 25 of 29 March 2022, an amendment t...
Amendments to the Cybersecurity Act – Scope and Key AspectsIn State Gazette, No. 25 of 29 March 2022, amendments to the Cybersecurity Act were promulgated. These amendments intr...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
