Revising and improving implemented standardsISO 27001... REVISING AND IMPROVING IMPLEMENTED STANDARDS Standardization and compliance organizations periodically review and update the content of published standards, schemes, and specifications to align them with the evolving business environment. All c...
Maintenance of management standardsISO 27001... PURPOSE AND BENEFITS OF MAINTENANCE OF MANAGEMENT SYSTEM Successful functioning of each management system (MS) based of any of the international standards requires continuously maintenance and development. The maintenance of management sy...
Testing of Security of Information SystemsISO 27001... NETWORK PENETRATION TESTING Penetration test is a methods and techniques to gain access to information systems. Its main goal is to identify the presence of vulnerabilities allowing malicious people to establish access to your systems and personal a...
Implementation of the GDPR (Regulation 2016/679)ISO 27001... THE STAGES OF CONSULTATION ON GDRP REQUIREMENTS CAN BE CONDITIONALLY DIVIDED INTO: GAP analysis and assessment of the current level of compliance; preparation of rules and procedures for implementation of the requirements of GDRP; assista...
Data protection officerISO 27001... In connection with the requirements of Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act (PDPA), we offer as a service the opportunity to be your DPO. DPO can be an employee of a personal data controller or a person ex...
Internal audit on standards/schemes/practicesISO 27001... The implementation and subsequent successful certification of a Management System in your organization is not the last step on the way to improvement and continuous improvement. As far as the Management Systems are concerned, their maintenance depend...
NIST SP 800-53ISO 27001... NIST SP 800-53 Security and Privacy Controls for Information Systems and Organizations is part of the SP 800 group of standards, containing more than 1300 documents of the National Institute of Standards and Technology (NIST), USA. It was developed b...
Cybersecurity, Information SecurityISO 27001 sets the requirements for the Information Security management System (ISMS). ISO 27001 is applicable for all types of organizations: commercial, nonprofit, governmental and non-governmental. The advantages of implementing an Information...
What is Management SystemISO 27001... WHAT IS AN ISO STANDARD MANAGEMENT SYSTEM? The management system of an organization defines the policies and procedures, that guarantee to the customers a constant quality, safety and security of the offered product and service, regardless of th...
Integrated Management SystemISO 27001... What is an Integrated Management System (IMS)? An Integrated Management System (IMS) integrates the requirements of two or more management system standards into a unified management framework. It enables an organisation to manage its processes, risk...
How to Prepare for the Transition to a New Version of a Standard?Stay ahead of requirements and protect your certification Revisions to standards are a natural part of continuous imp...
NEW: Network and Information Security Specialist as a ServiceDouble the Power for Your Information Security With over a decade of consultancy experience and dozens of successfu...
How NIS 2 relates to ISO/IEC 27001Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
Transition to the Requirements of ISO/IEC 27001:2022CHANGES IN MANAGEMENT SYSTEMS In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
ISÎ/IÅC 27001:2022 has been publishedISO has published the new version of ISO/IEC 27001 under the title "Information security, cybersecurity and pr...
Upcoming version of ISO 27001: new controls from 2022Taking into account the rapidly changing cybersecurity environment, ISOs are updating information security standards. Ea...
How to measure the effectiveness of Information Security?You simply can’t be too careful when it comes to information security. Protecting personal records and commerciall...
ISO 22301:2012 Societal security - Business continuity management systemsISO 22301 specifies requirements to plan, establish, implement, operate, monitor, review, maintain and continually impro...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
