IT audit (Information systems audit)Directive (EU) 2022/2555 (NIS 2 Directive) and international standards such as ISO/IEC 27001, ISO/IEC 27002, NIST, TISAX and others. Main Objectives of the IT Audit: To determine whether IT services comply with ...
Bulgarian Cybersecurity ActDirective (EU) 2022/2555 (NIS 2) were introduced into national legislation. NIS 2 significantly expands the scope of obligated entities, introduces stricter risk management requirements, and strengthens supervisory and sanctioning mechanism...
NIS2 (Directive (EU) 2022/2555)Directive (EU) 2022/2555 of the European Parliament and of the Council on measures for a high common level of cybersecurity across the Union is a legislative act aimed at achieving a high common level of cybersecurity throughout the European Union. ...
Cybersecurity, Information SecurityDirective (EU) 2022/2555 (NIS 2) GDPR SOC 2 TISAX An information security management system (ISMS) will also ensure the provision of business continuity in case of emergency and crisis. ...
NIS2 Registration in Bulgaria: Who Is Required to Register and What Are the Requirements?The transposition of Directive (EU) 2022/2555 (NIS2) into Bulgarian law expands the range of organisations subject to cy...
NIST Cybersecurity Framework 2.0 (NIST CSF 2.0)The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
Ten Days Until Sanctions Under the Cybersecurity Act Apply in FullAfter 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
How ISO/IEC 27001 Supports Compliance with the Bulgarian Cybersecurity Act (NIS2)With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
Amendments to the Cybersecurity ActWith the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
Parliament Adopted at Second Reading Amendments to the Cybersecurity Act in Connection with
NIS 2After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
If Cybercrime Were a Country, It Would Rank Third in GDP in 2024In 2024, the global economy saw a growth of 3.2% compared to the previous year, reaching approximately 105 t...
The Cybersecurity Bill Advances Towards Final AdoptionThe draft amendments to the Bulgarian Cybersecurity Act aim to transpose Directive (EU) 2022/2555 (known as the NIS2 D...
Draft Bill Amending the Cybersecurity Act Submitted in Connection with NIS2A draft bill to amend and supplement the Bulgarian Cybersecurity Act has been submitted to the Bulgarian National A...
How NIS 2 relates to ISO/IEC 27001Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
Differences between NIS and NIS 2 directivesThe European Union's cybersecurity rules, introduced in 2016, have been updated by Directive (EU) 2022/2555 of ...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
