Your rating 0 from 0 votes
23 results found for "ISO/IEC 27001" in pages:
About usISO/IEC 27001, ISO 22000, BRCGS, IFS, HACCP and others. As regulatory frameworks and business needs have evolved, CONSEJO has expanded its expertise to include cybersecurity, information security management, risk management, business continuity, pers...
Why to choose CONSEJO?ISO/IEC 27001, HACCP, IFS Food, GMP and other relevant standards and schemes? How can these requirements be effectively integrated into your organization’s existing processes? Does your organization have the internal expertise required to d...
Implementation of management standardsISO/IEC 27001 Information Security, Cybersecurity and Privacy Protection – Information Security Management Systems – Requirements ISO 28000 Security and resilience. Security management systems. Requirements ISO 45001 Occupational heal...
IT audit (Information systems audit)ISO/IEC 27001 requirements. Evaluating the security of communication and network infrastructure. Assessing the security of core applications, including web-based applications and databases. Evaluating the security posture of critical server sys...
Phishing Simulations for EmployeesISO/IEC 27001: Control A.6.3 requires information security awareness, education and training. DORA: Financial organisations must conduct digital operational resilience awareness and training programmes for their employees. How It Works S...
ISO 20000-1 Service managementISO/IEC 27001 standard. The optimal option for the most effective process management in the IT sector is the implementation of an integrated management system, according to the requirements of the standards ISO/IEC 20000, ISO/IEC 27001 and ISO&n...
ISO 22301 Business continuity management systemsISO/IEC 27001... ISO 22301 defines the requirements for the development and implementation of an efficient Business continuity management system (BCMS). ISO 22301 describes the main elements of managing business continuity: Planning, establishin...
ISO/IEC 27001 Cybersecurity and Privacy ProtectionISO/IEC 27001 is an international standard that specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS). The standard provides a framework for systematically...
ISO/IEC 27017:2015 Code of practice for information security controlsISO/IEC 27001 significantly enhances the level of security in a cloud environment. Why is ISO/IEC 27017 Important? With the rapid evolution and widespread adoption of cloud technologies, effective information security management in cloud en...
ISO/IEC 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processorsISO/IEC 27001... ISO/IEC 27018:2025 is an international standard that provides guidelines for the protection of Personally Identifiable Information (PII) in the use of public cloud services. It is part of the ISO/IEC 27000 family of standards and is in...
ISO/IEC 27032 Guidelines for Internet securityISO/IEC 27001 and ISO/IEC 27002. Key Aspects of ISO/IEC 27032 Interconnection Between Cybersecurity and Internet Security: The standard examines the relationship between cybersecurity, web security, network security, and Internet security, emp...
ISO 37001 Anti-bribery management systemsISO/IEC 27001... ISO 37001:2025 is an international standard that specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving an Anti-Bribery Management System (ABMS). It supports organizations in preventing...
ISO 21434 Road vehicles – Cybersecurity engineeringISO/IEC 27001... ISO/SAE 21434 Road vehicles – Cybersecurity engineering specifies the engineering requirements for cybersecurity risk management in relation to the conception, product development, manufacture, operation, maintenance and decommissioning of elec...
ISO/IEC 42001 Artificial intelligenceISO/IEC 27001 defines the framework for information security, ISO/IEC 42001 defines how an organization manages the entire life cycle of its AI systems: from planning and development, or supplier selection, through deployment and monitoring, to decom...
GDPR (General Data Protection Regulation)ISO/IEC 27001 is not a requirement under the GDPR but may support compliance with its security obligations. 🔹Data Protection Officer (DPO) Controllers and processors must designate a Data Protection Officer (DPO) where: the pr...
Bulgarian Cybersecurity ActISO/IEC 27001... The Bulgarian Cybersecurity Act (promulgated in State Gazette No. 94 of 13 November 2018, as amended and supplemented, SG No. 17 of 13 February 2026) is the principal legislative act governing the protection of network a...
Regulation (EU) 2024/1689ISO/IEC 27001 or ISO/IEC 27701, many AI Act requirements can be integrated into existing quality, information security, privacy and risk management processes. In particular, ISO/IEC 42001 (Artificial Intelligence Management System – AIMS) prov...
SOC 2 (Service Organisation Control Type 2)ISO/IEC 27001 and PCI DSS have strict requirements regarding cybersecurity controls, SOC 2 does not prescribe a fixed set of controls; insteat, each organization designs and implements controls appropriate to its services, operating model, and risk p...
TISAX (Trusted Information Security Assessment Exchange)ISO/IEC 27001... What is TISAX? TISAX (Trusted Information Security Assessment Exchange) is a mechanism for assessing and mutually recognising information security assessment results within the automotive industry. TISAX was developed on the initiative of the Ger...
EcoVadis evaluationISO/IEC 27001... EcoVadis evaluation Sustainability is becoming an increasingly important factor for businesses. Customers, investors, business partners and regulators increasingly expect organizations to demonstrate responsible business practices an...
NIS2 (DIRECTIVE (EU) 2022/2555)ISO/IEC 27001 and NIS2 Implementation and certification under ISO/IEC 27001 "Information Security, Cybersecurity and Privacy Protection. Information Security Management Systems - Requirements" significantly facilitate the process...
Cybersecurity, Information SecurityISO/IEC 27001... Information Security Management System (ISMS) is a management approach for organization's sensitive information in a way that ensures its security. This information can be company property (know-how, personal information, etc.) or customer ...
Integrated Management SystemISO/IEC 27001; Information security and business continuity management – ISO/IEC 27001 and ISO 22301; Quality, security, and business continuity management – ISO 9001, ISO 28000, and ISO 22301; Quality, environmental and energ...
47 results found for "ISO/IEC 27001" in news:
European Cybersecurity Month 2026: Are Employees Prepared for Cyber Threats?Every October, Europe marks European Cybersecurity Month (ECSM), an annual European initiative to raise cybersecurity aw...
The Human Factor in Information Security: Why Technology Is Not EnoughAhead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
Information Security and Cybersecurity – Is There a Difference?The digitalization of business processes, the use of cloud services, remote working, and the growing volume of informati...
Artificial Intelligence and Sustainable Tourism: How Technology Is Transforming the
Management
and Quality of Tourism ServicesTourism is one of the sectors in which digital technologies are transforming both the way services are delivered and cus...
New EU AI Act Requirements Take Effect TodayAs of today, 2 August 2026, Regulation (EU) 2024/1689 on Artificial Intelligence (the EU AI Act) reaches another key imp...
VDA Releases the VDA ISA2027 CatalogueThe German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
Regulation (EU) 2024/1689 enters a new phase on 2 August 2026On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
NIST Cybersecurity Framework 2.0 (NIST CSF 2.0)The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
ISO 19011:2026: updated guidance for auditing management systemsThe new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
Ten Days Until Sanctions Under the Cybersecurity Act Apply in FullAfter 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
How ISO/IEC 27001 Supports Compliance with the Bulgarian Cybersecurity Act (NIS2)With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
Why ISO Standards Are Becoming Crucial in Public ProcurementIn recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
How to Choose the Right Consulting Organization?In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
Key Changes in International Standards and Regulatory Requirements in 20252025 established itself as a year of significant change in the fields of management standards, information security...
ISO/IEC 27071: Security and Trust Between Devices and ServicesWith the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
ISO/IEC 42005:2025 – a standard for assessing the impact of artificial intelligence systemsWith the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
ISO/IEC 27701:2025 — A New Era in Privacy ManagementISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
ISO/IEC 27701:2025 – The New Standard for Privacy, AI and Cloud TechnologiesOn 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
ISO 54002:2025 – The New Quality Management Standard for Police OrganizationsNew Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
ISO/IEC 27018:2025: Updated Guidelines for PII Protection in Cloud EnvironmentsIn August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
ISO/IEC 27018:2025 – Enhanced Protection of Personal Data in the CloudAugust 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
ISO/IEC 27017 – Information Security Standard for Cloud ServicesIn the era of digital transformation, an increasing number of organizations are shifting their operations, data, and...
ISO 37001:2025 – A New Generation Standard for Anti-Bribery ManagementThe International Organization for Standardization (ISO) has officially published ISO 37001:2025 — Ant...
International Summit on AI Standards – December 2025The first of its kind International Summit on AI Standards will take place on December 2-3, 2025, in Seoul. The initia...
Draft Bill Amending the Cybersecurity Act Submitted in Connection with NIS2A draft bill to amend and supplement the Bulgarian Cybersecurity Act has been submitted to the Bulgarian National A...
Impact Analysis of Cyber AttacksWhether it’s an attempt to breach the network or a complete shutdown of information systems, cyber-attacks are hig...
Regulation (EU) 2024/1689 on artificial intelligence rulesRegulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI) sets out a framework for the deve...
How NIS 2 relates to ISO/IEC 27001Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
What is ISMS and why do you need it?Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...
Amendment 1: Climate action changesLate last week, the International Organization for Standardization (ISO) announced the introduction of amendments to a n...
New Version of ISO 9001 with Focus on Climate ChangeThe recent 50th meeting of ISO TC 176/SC 2, held from 8-13 October, confirmed the decision for an early revision of the ...
ISO/IEC 27035-1:2023 AND ISO/IEC 27035-2:2023 WITH NEW VERSIONSEarlier this week, the Bulgarian Standards Institute published BDS ISO/IEC 27035-1:2023 Information technology. Informat...
Standards for the protection of automotive securityThe automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
WLA Security Control Standard - security controls in the lottery industryThe WLA Security Control Standard (WLA SCS) is an information security management framework developed by the World Lotte...
Transition to the Requirements of ISO/IEC 27001:2022CHANGES IN MANAGEMENT SYSTEMS In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
Regulatory Cybersecurity Obligations of Municipal EnterprisesMunicipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
ISO/IEC 27005:2022 – What Has Changed in Information Security Risk ManagementIn October 2022, the new edition of ISO/IEC 27005, Information security, cybersecurity and privacy protection — Gu...
ISÎ/IÅC 27001:2022 has been publishedISO has published the new version of ISO/IEC 27001 under the title "Information security, cybersecurity and pr...
Upcoming version of ISO 27001: new controls from 2022Taking into account the rapidly changing cybersecurity environment, ISOs are updating information security standards. Ea...
ISO 28000 - New VersionOn 15.03.2022 ISO published a new version of the standard ISO 28000:2022 Security and resilience — Security manage...
New version of ISO/IEC 27002On 15 February 2022 the international organization ISO published the new version of ISO/IEC 27002 "Information...
The Guide for Auditors of Information Security Management Systems Has Been UpdatedAt the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
A new standard has been published to support the privacy information managementThe world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
An Updated Version of ISO/IEC 27005 – Information Security Risk Management Has Been
PublishedProtecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
How to measure the effectiveness of Information Security?You simply can’t be too careful when it comes to information security. Protecting personal records and commerciall...
ISO/IEC 27040:2015 Information technology - Security techniques - Storage securityAt the beginning of 2015, the international standard ISO/IEC 27040:2015 Information technology — Security techniqu...
Latest issue of The ISO Survey shows 16% rise in ISO 9001 and ISO 14001 certificationsCertification to ISO 9001 (for quality management) and to ISO 14001 (for environmental management) increased in both cas...
News
12
10.26
NATO Quality Assurance Standards Gain Attention in Defence Industry Investment
NATO quality assurance requirements are of practical importance to Bulgarian com...
25
09.26
European Cybersecurity Month 2026: The Human Factor in Focus
Today, the Court of Justice of the European Union in Luxembourg is hosting the o...
Accents
06
11.26
AQAP-2110: Beyond ISO 9001 Requirements
What additional requirements apply to suppliers in the defence industry?
For ...
20
10.26
Change Management in the Food Sector: When Is a New Risk Assessment Necessary?
Changing a supplier may seem like a routine commercial decision, while extending...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
Partners
