ISO 20000-1 Service managementISO/IEC 27018... ISO/IEC 20000 Information technology. Service management reduces operational risk, meets contractual requirements and demonstrates the quality of services provided at an optimized price. ISO/IEC 20000-1 is a standard for man...
ISO 22301 Business continuity management systemsISO/IEC 27018... ISO 22301 defines the requirements for the development and implementation of an efficient Business continuity management system (BCMS). ISO 22301 describes the main elements of managing business continuity: Planning, establishin...
ISO/IEC 27001 Cybersecurity and Privacy ProtectionISO/IEC 27018... ISO/IEC 27001 is an international standard that specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS). The standard provides a framework for systematically...
ISO/IEC 27017:2015 Code of practice for information security controlsISO/IEC 27018 – Focuses on protecting personally identifiable information (PII) in public clouds, and complements ISO/IEC 27017 with additional privacy-focused controls aligned with regulations like the GDPR. Together, these standards o...
ISO/IEC 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processorsISO/IEC 27018:2025 Is ISO/IEC 27018:2025 provides additional controls and guidance specific to public cloud services, building upon general information security controls. The standard applies in situations where the cloud service provider acts ...
ISO 21434 Road vehicles – Cybersecurity engineeringISO/IEC 27018... ISO/SAE 21434 Road vehicles – Cybersecurity engineering specifies the engineering requirements for cybersecurity risk management in relation to the conception, product development, manufacture, operation, maintenance and decommissioning of elec...
Cybersecurity, Information SecurityISO/IEC 27018... Information Security Management System (ISMS) is a management approach for organization's sensitive information in a way that ensures its security. This information can be company property (know-how, personal information, etc.) or customer ...
Key Changes in International Standards and Regulatory Requirements in 20252025 established itself as a year of significant change in the fields of management standards, information security...
ISO/IEC 27701:2025 – The New Standard for Privacy, AI and Cloud TechnologiesOn 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
ISO/IEC 27018:2025 – Enhanced Protection of Personal Data in the CloudAugust 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
ISO/IEC 27018:2025: Updated Guidelines for PII Protection in Cloud EnvironmentsIn August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
ISO/IEC 27017 – Information Security Standard for Cloud ServicesIn the era of digital transformation, an increasing number of organizations are shifting their operations, data, and...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
