Your rating 0 from 0 votes
28 results found for "Information security" in pages:
About usInformation security... CONSEJO Ltd. is a consulting company with more than 20 years of practical experience in the development, implementation and maintenance of management systems and in supporting organizations in achieving compliance with international standards and reg...
Why to choose CONSEJO?Information security... Why Choose CONSEJO? Choosing the right consulting partner when implementing a management system has a direct impact on the quality of the final outcome. A well-managed implementation project involves much more than preparing documentation. It requ...
Privacy NoticeInformation security... CONSEJO Ltd. is a controller of personally identifiable information (PII), according to the meaning of the REGULATION (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free moveme...
Implementation of management standardsInformation security... The service Development and implementation of management standards performed by CONSEJO includes identification of the current business model, development and implementation of Management Systems (MS) and the Integrated Management System (IMS) based ...
IT audit (Information systems audit)Information security... IT audit (Information systems audit) The "IT Audit" service, performed by CONSEJO Ltd., assesses the current state of Information security within the organization with respect to data protection. This assessment is conducted through the ...
Testing of Security of Information SystemsInformation security... NETWORK PENETRATION TESTING Penetration test is a methods and techniques to gain access to information systems. Its main goal is to identify the presence of vulnerabilities allowing malicious people to establish access to your systems and personal a...
Phishing Simulations for EmployeesInformation security... Most successful cyberattacks do not begin with a breach of a firewall, but with a single email that someone has clicked on. A phishing simulation shows what could happen in your organisation before it actually happens. CONSEJO conducts controlled ph...
ISO 20000-1 Service managementInformation security... ISO/IEC 20000 Information technology. Service management reduces operational risk, meets contractual requirements and demonstrates the quality of services provided at an optimized price. ISO/IEC 20000-1 is a standard for man...
ISO 22301 Business continuity management systemsInformation security management", ISO/IEC 20000-1 "Information technology. Service management" and ISO 28000 "Specification for security management systems for the supply chain", and thus it assists the efficient fu...
ISO/IEC 27001 Cybersecurity and Privacy ProtectionInformation security controls Annex A of ISO/IEC 27001 contains a list of Information security controls aligned with the controls in ISO/IEC 27002:2022. They are used in the context of the Information security risk treatment process. The contro...
ISO/IEC 27017:2015 Code of practice for Information security controlsInformation security consultants and auditors. Benefits of Implementing ISO/IEC 27017 Enhanced Security – Identifies and addresses risks specific to cloud environments. Increased Trust – Demonstrates to clients and...
ISO/IEC 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processorsInformation security... ISO/IEC 27018:2025 is an international standard that provides guidelines for the protection of Personally Identifiable Information (PII) in the use of public cloud services. It is part of the ISO/IEC 27000 family of standards and is in...
ISO/IEC 27032 Guidelines for Internet securityInformation security, cybersecurity, and privacy protection. Information security management systems. Requirements. ISO/IEC 27002 – Information security, cybersecurity, and privacy protection. Information security Controls ISO/IEC 27005 &nd...
NIST SP 800-53Information security... NIST SP 800-53 Security and Privacy Controls for Information Systems and Organizations is part of the SP 800 group of standards, containing more than 1300 documents of the National Institute of Standards and Technology (NIST), USA. It was developed b...
ISO 21434 Road vehicles Cybersecurity engineeringInformation security... ISO/SAE 21434 Road vehicles – Cybersecurity engineering specifies the engineering requirements for cybersecurity risk management in relation to the conception, product development, manufacture, operation, maintenance and decommissioning of elec...
ISO/IEC 42001 Artificial intelligenceInformation security... ISO/IEC 42001:2023 is the first international standard for artificial intelligence management systems. It provides organizations that develop, provide or use AI systems with a structured and auditable model for the responsible management of artificia...
ISO/IEC 27701 Information security, cybersecurity and privacy protectionInformation security, cybersecurity and privacy protection — Privacy information management systems — Requirements and guidance. It replaces the 2019 edition, which was a technical extension to ISO/IEC 27001 and ISO/IEC 27...
GDPR (General Data Protection Regulation)Information security... CHALLENGES FOR BUSINESSES IN IMPLEMENTING THE REQUIREMENTS OF THE EUROPEAN LEGAL FRAMEWORK, APPLICABLE AFTER 25 MAY 2018 The development of information technologies and international trade in recent decades has created ...
Bulgarian Cybersecurity ActInformation security... The Bulgarian Cybersecurity Act (promulgated in State Gazette No. 94 of 13 November 2018, as amended and supplemented, SG No. 17 of 13 February 2026) is the principal legislative act governing the protection of network a...
Ordinance on the Minimum Requirements for Network and Information securityInformation security... (Promulgated in State Gazette No. 59 of 26 July 2019, amended SG No. 36 of 13 May 2022, amended SG No. 47 of 24 June 2022) What you need to know The Ordinance sets out specific requirements for ensuring network and information securi...
Law on the Protection of Persons Reporting BreachesInformation security... In 2023, the Law on the Protection of Persons Reporting or Publicly Disclosing Information on Breaches was introduced into Bulgarian legislation. The Law transposes the requirements of Directive (EU) 2019/1937 on the protection of persons who re...
Regulation (EU) 2024/1689Information security... Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (the EU AI Act) is the European Union's first comprehensive legal framework for artificial intelligenc...
SOC 2 (Service Organisation Control Type 2)Information security: how is data protected from unauthorized access and use? Logical and physical access control: how is logical and physical access managed and restricted to prevent unauthorized use? System operations: what are and how are the ...
TISAX (Trusted Information security Assessment Exchange)Information security... What is TISAX? TISAX (Trusted Information security Assessment Exchange) is a mechanism for assessing and mutually recognising Information security assessment results within the automotive industry. TISAX was developed on the initiative of the Ger...
NIS2 (DIRECTIVE (EU) 2022/2555)Information security... Directive (EU) 2022/2555 of the European Parliament and of the Council on measures for a high common level of cybersecurity across the Union is a legislative act aimed at achieving a high common level of cybersecurity throughout the European Union. ...
DORA (Regulation (EU) 2022/2554)Information security... DORA (REGULATION (EU) 2022/2554) Regulation (EU) 2022/2554 on digital operational resilience for the financial sector was adopted on 14 December 2022 by the European Parliament and the Council of the EU and aims to prevent and mitigate the risk of...
Cybersecurity, Information securityInformation security standards: ISO 22301 Security and resilience. Business continuity management systems. Requirements ISO 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processors Dire...
Integrated Management SystemInformation security and business continuity management – ISO/IEC 27001 and ISO 22301; Quality, security, and business continuity management – ISO 9001, ISO 28000, and ISO 22301; Quality, environmental and energy management &nda...
62 results found for "Information security" in news:
NIS2 Registration in Bulgaria: Who Is Required to Register and What Are the Requirements?The transposition of Directive (EU) 2022/2555 (NIS2) into Bulgarian law expands the range of organisations subject to cy...
European Cybersecurity Month 2026: Are Employees Prepared for Cyber Threats?Every October, Europe marks European Cybersecurity Month (ECSM), an annual European initiative to raise cybersecurity aw...
The Human Factor in Information security: Why Technology Is Not EnoughAhead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
European Cybersecurity Month 2026: The Human Factor in FocusToday, the Court of Justice of the European Union in Luxembourg is hosting the official kick-off event for European Cybe...
Information security and Cybersecurity Is There a Difference?The digitalization of business processes, the use of cloud services, remote working, and the growing volume of informati...
Artificial Intelligence and Sustainable Tourism: How Technology Is Transforming the
Management
and Quality of Tourism ServicesTourism is one of the sectors in which digital technologies are transforming both the way services are delivered and cus...
New EU AI Act Requirements Take Effect TodayAs of today, 2 August 2026, Regulation (EU) 2024/1689 on Artificial Intelligence (the EU AI Act) reaches another key imp...
VDA Releases the VDA ISA2027 CatalogueThe German Association of the Automotive Industry (VDA) has officially released the new Information security assessment ...
Regulation (EU) 2024/1689 enters a new phase on 2 August 2026On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
NIST Cybersecurity Framework 2.0 (NIST CSF 2.0)The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
ISO 19011:2026: updated guidance for auditing management systemsThe new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
7 June World Food Safety DayOn 7 June, the world marks World Food Safety Day – an initiative of the World Health Organization and the Food and...
Ten Days Until Sanctions Under the Cybersecurity Act Apply in FullAfter 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
How ISO/IEC 27001 Supports Compliance with the Bulgarian Cybersecurity Act (NIS2)With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
Action Plan Against CyberbullyingOn 10 February 2026, on the occasion of Safer Internet Day, the European Commission presented the EU Action Pla...
Safer Internet Day 2026 Together for a Safer Online World10 February 2026 — Today marks Safer Internet Day – a global initiative that promotes the safer, more respon...
Parliament Adopted at Second Reading Amendments to the Cybersecurity Act in Connection with
NIS 2After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
Why ISO Standards Are Becoming Crucial in Public ProcurementIn recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
How to Choose the Right Consulting Organization?In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
Key Changes in International Standards and Regulatory Requirements in 20252025 established itself as a year of significant change in the fields of management standards, Information security...
ISO/IEC 42005:2025 a standard for assessing the impact of artificial intelligence systemsWith the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
ISO/IEC 27071: Security and Trust Between Devices and ServicesWith the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
ISO/IEC 27701:2025 A New Era in Privacy ManagementISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
ISO/IEC 27701:2025 The New Standard for Privacy, AI and Cloud TechnologiesOn 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
ISO 54002:2025 The New Quality Management Standard for Police OrganizationsNew Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
ISO/IEC 27018:2025: Updated Guidelines for PII Protection in Cloud EnvironmentsIn August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
ISO/IEC 27018:2025 Enhanced Protection of Personal Data in the CloudAugust 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
NEW: Network and Information security Specialist as a ServiceDouble the Power for Your Information security With over a decade of consultancy experience and dozens of successfu...
Amendments to the Law on the Protection of Persons Reporting BreachesIn the State Gazette, Issue No. 38 of 2025, amendments and supplements to the Law on the Protection of Persons Reporting...
ISO/IEC 27017 Information security Standard for Cloud ServicesIn the era of digital transformation, an increasing number of organizations are shifting their operations, data, and...
How to Protect Your Data in the Digital AgeIn the digital age, cybersecurity is a key element for the success of any organization. With the increasing threat of ...
If Cybercrime Were a Country, It Would Rank Third in GDP in 2024In 2024, the global economy saw a growth of 3.2% compared to the previous year, reaching approximately 105 t...
International Summit on AI Standards December 2025The first of its kind International Summit on AI Standards will take place on December 2-3, 2025, in Seoul. The initia...
Post-Quantum Cryptography: The Future of CybersecurityWith the development of quantum computers, traditional cryptographic algorithms such as RSA, ECC (Elliptic Curve Cryptog...
Impact Analysis of Cyber AttacksWhether it’s an attempt to breach the network or a complete shutdown of information systems, cyber-attacks are hig...
DORA - New Cybersecurity Requirements in the EU Financial SectorRegulation (EU) 2022/2554, known as the Digital Operational Resilience Act (DORA), will take effect on January 17, ...
Regulation (EU) 2024/1689 on artificial intelligence rulesRegulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI) sets out a framework for the deve...
How NIS 2 relates to ISO/IEC 27001Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
What is ISMS and why do you need it?Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information security ...
ISO/IEC 27035-1:2023 AND ISO/IEC 27035-2:2023 WITH NEW VERSIONSEarlier this week, the Bulgarian Standards Institute published BDS ISO/IEC 27035-1:2023 Information technology. Informat...
Standards for the protection of automotive securityThe automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
WLA Security Control Standard - security controls in the lottery industryThe WLA Security Control Standard (WLA SCS) is an Information security management framework developed by the World Lotte...
ISO/SAE 21434:2021 Road vehicles Cybersecurity engineeringISO/SAE 21434:2021 is an international standard that addresses cyber security in the engineering of electrical and ...
Transition to the Requirements of ISO/IEC 27001:2022CHANGES IN MANAGEMENT SYSTEMS In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
Threat Intelligence: Responding to the New Information security ThreatsNew developments in cyber security threats have pushed companies to look for new ways to protect themselves and their ...
When Do Municipal Enterprises Fall Under Cybersecurity RequirementsA Practical Assessment Test for the Management of Municipal Enterprises on the Applicability of the Cybersecurity Act an...
Regulatory Cybersecurity Obligations of Municipal EnterprisesMunicipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
ISO/IEC 27005:2022 What Has Changed in Information security Risk ManagementIn October 2022, the new edition of ISO/IEC 27005, Information security, cybersecurity and privacy protection — Gu...
ISฮ/IลC 27001:2022 has been publishedISO has published the new version of ISO/IEC 27001 under the title "Information security, cybersecurity and pr...
Financial Assistance to Improve Information and Communication Technologies in Small and
Medium-sized EnterprisesEU is giving 30 600 000 of financial assistance in support of procedure BG-RRP-3.005 “Improving Information and ...
Upcoming version of ISO 27001: new controls from 2022Taking into account the rapidly changing cybersecurity environment, ISOs are updating Information security standards. Ea...
Cybersecurity Act Amended(promulgated in the State Gazette, No. 25 of 29 March 2022) In State Gazette, No. 25 of 29 March 2022, an amendment t...
Amendments to the Cybersecurity Act Scope and Key AspectsIn State Gazette, No. 25 of 29 March 2022, amendments to the Cybersecurity Act were promulgated. These amendments intr...
New version of ISO/IEC 27002On 15 February 2022 the international organization ISO published the new version of ISO/IEC 27002 "Information...
Cybersecurity in CarsNew standard just published to help keep the hackers at bay As our cars get more connected, the risk of cybersecurity b...
TISAX - Mechanism for Assessing the Security and Reliability of Information in the Automotive
IndustryTISAX is an assessment and exchange mechanism for the Information security of enterprises in the automotive supply chain...
The Guide for Auditors of Information security Management Systems Has Been UpdatedAt the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
A new standard has been published to support the privacy information managementThe world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
An Updated Version of ISO/IEC 27005 Information security Risk Management Has Been
PublishedProtecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
How to measure the effectiveness of Information security?You simply can’t be too careful when it comes to Information security. Protecting personal records and commerciall...
ISO/IEC 27040:2015 Information technology - Security techniques - Storage securityAt the beginning of 2015, the international standard ISO/IEC 27040:2015 Information technology — Security techniqu...
Latest issue of The ISO Survey shows 16% rise in ISO 9001 and ISO 14001 certificationsCertification to ISO 9001 (for quality management) and to ISO 14001 (for environmental management) increased in both cas...
News
12
10.26
NATO Quality Assurance Standards Gain Attention in Defence Industry Investment
NATO quality assurance requirements are of practical importance to Bulgarian com...
25
09.26
European Cybersecurity Month 2026: The Human Factor in Focus
Today, the Court of Justice of the European Union in Luxembourg is hosting the o...
Accents
06
11.26
AQAP-2110: Beyond ISO 9001 Requirements
What additional requirements apply to suppliers in the defence industry?
For ...
20
10.26
Change Management in the Food Sector: When Is a New Risk Assessment Necessary?
Changing a supplier may seem like a routine commercial decision, while extending...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
Partners
