audits and benefit from management systems that deliver real value and support the long-term development of their organizations. ...
audit and the subsequent maintenance and continual improvement of the management system. Why Do You Need a Professional Consultant? Implementing a management system without external support requires an in-depth understanding of the applicable sta...
audit; revision and changing of documents, if necessary, as a result of checking. STAGE 4 Functioning conducting training of internal auditors; performing internal audits. STAGE 5 Certification and obtaining a certificate: (perfo...
audit outcomes. Our Management System Consulting Services Include: Conducting an initial audit or assessment of your current Management System; Developing a detailed transition plan to the new version of the standard; Revising and updati...
audits; Improving the efficiency of existing management system. CONSEJO OFFERS THE FOLLOWING CONSULTANCY SERVICES IN MAINTENANCE MANAGEMENT SYSTEMS Update of the document management system through amendments caused by internal or...
audit (Information systems audit) The "IT audit" service, performed by CONSEJO Ltd., assesses the current state of information security within the organization with respect to data protection. This assessment is conducted through the imp...
audit of business processes related to the processing and administration of personal data. The audit is carried out on a sample basis, following the entire life cycle of randomly selected personal data. A guarantee for the successful maintenance o...
audits; on request, to advise on the data protection impact assessment and monitor the assessment; to collaborate with the supervisory body; to act as a contact point for the supervisory authority on matters relating to processing, including pr...
audits. CONSEJO offers, as a further service, performing internal audit of management systems (MS) according to ISO 9001, ISO 14001, ISO 20000-1, ISO/IEC 27001, ISO 28000, ISO 45001, ISO 50001, ISO 22000, IFS,...
audit. A culture of reporting. Employees learn not only to avoid clicking but also to report suspicious messages promptly. Compliance with Requirements Bulgarian Cybersecurity Act and NIS2: The Directive requires basic cyber hygiene prac...
audits, providing expert assistance and consultations to its clients. Our team of highly qualified experts has extensive experience in supporting organizations throughout the audit process, ensuring efficiency, accuracy, and compliance with applicabl...
audit of the business processes. The audit is conducted on a sample basis, tracking all the necessary processes related to the fulfillment of the requirements....
audit... Legal Compliance Assessment CONSEJO offers professional compliance assessment services tailored to companies from various industries aiming to ensure compliance with applicable regulatory requirements. Our team of experts provides comprehensive su...
audit to assess whether the implemented system conforms to the applicable AQAP requirements. Where nonconformities are identified, we assist the organisation in determining and implementing the necessary corrective actions. 6. Preparation for Certi...
audits and supporting conformity assessment processes, where applicable. ISO 13485 and Other Management Systems ISO 13485 can be integrated with other management systems when an organization applies more than one international standard. ...
audits. Benefits for the organization from implementation and certification to ISO 14001 • Increased trust among partners, customers, investors and other interested parties; • Enables the organization to manage its environme...
auditing the IT Services Management System. ISO/IEC 20000 integrates the process approach that underpins the ISO standards for management systems – ISO 9001 and ISO 14001 – and includes the Plan – Do...
audit. 5. All processes for the management of continuity of operation, applicable to the organization. The international standard ISO 22301 applies the model "Plan-Do-Check-Act", typical for most of the ISO standards. This model ...
audits, and management review. 10. Improvement Continual improvement, management of nonconformities, and corrective actions. Annex A – Information security controls Annex A of ISO/IEC 27001 contains a list of information security co...
auditors. Benefits of Implementing ISO/IEC 27017 Enhanced Security – Identifies and addresses risks specific to cloud environments. Increased Trust – Demonstrates to clients and partners that their data is well pro...
audits and compliance assessments; easy integration with an ISO/IEC 27001-based ISMS; enhanced risk management related to PII protection in cloud environments. How CONSEJO Can Help CONSEJO supports organizations in implement...
audit (16) Documentation (17) In order to clarify the way to achieve the objectives of the standard, in each main section a part Principle has been additionally introduced. The purpose of the guidelines of ISO 22716 Good Manufa...
audit, management review and continual improvement of the anti-bribery management system. Benefits of implementing ISO 37001 Implementing ISO 37001 helps organizations effectively manage bribery risks and build a sustainable culture ...
audits and monitoring. Can NIST SP 800-53 Improve Your Organization's Security System? Yes. Although it was originally intended for use by US federal government agencies, it can help organizations in all industries improve the security ...
audit by approved independent auditing bodies (IAB) or through self-certification. Certificates are available to TAPA EMEA members. Non-member companies must first undergo a standards training course. ...
audit gives confidence to customers and partners about the quality and safety of food products and reduces the need to carry out separate inspections by customers, which in turn leads to a reduction in costs for everyone. Scope of the BRCGS ...
audits; continual improvement. ISO 22000 follows the High-Level Structure (HLS), which facilitates integration with other management systems such as ISO 9001 and ISO 14001. Prerequisite Programmes (PRPs) PRPs represent the basic hygienic a...
audit scheme (EMAS) (3) shall verify that the quality management system complies with the requirements of this Article. The verification should be carried out every 3 years. 6. The importer shall require his suppliers to implement a quality manageme...
auditable model for the responsible management of artificial intelligence — with risk controls, transparency towards customers and regulators, and support for implementing and demonstrating part of the requirements of Regulation (EU) 2024/1689,...
audit, management review, monitoring, and measurement; Improvement — corrective actions and continual improvement. The Annexes A–F contain: • Annex A: Controls for PII controllers and PII processors; • Annex B: ...
audits; requests for evidence and documentation; binding instructions; temporary suspension of activities in cases of serious violations. Sanctions The Bulgarian Cybersecurity Act provides for significant administrative penalties in...
audits, and other related measures. Alignment with international standards and best practices The Ordinance is aligned with: The ISO/IEC 270xx family of standards – Information Security Management Systems; Other international sta...
audit for food safety. The terminology used in the standard is harmonized. There are some changes in the certification protocol, in the scoring system, IFS Star status has been introduced for unannounced audits, there are new requirements introduced ...
audits – has been incorporated to make the new third version of 2007 more relevant to today’s concerns and advanced production techniques. (http://www.globalgap.org) ...
audit... The Eco-Management and audit Scheme is a voluntary scheme of the EU that aims to encourage organizations to continually improve their environmental performance by means of implementing a reliable Environmental Management System (EMS). The&n...
auditing and attestation framework developed by the American Institute of Certified Public Accountants (AICPA). Its main purpose is to ensure that service providers store and process customer data in a secure manner. While standards such as ...
audited by a second and third independent party. The adoption of sector-specific standards is pending. Companies within the scope of the Directive (EU) 2022/2464, deadlines and reporting period Who are the affected companies? The CSRD...
audits auditing the supply chain for compliance with labor and social standards and business ethics can have a significant impact on compliance with human rights and is an important tool to help identify risks. SMETA (Sedex Members ...
audit reports that may be accepted as supporting evidence for policies, actions or reporting, provided that they meet the applicable requirements. Certificates with an “in progress” status are no longer accepted as evidence of certificati...
audit rights. - Establish mechanisms to monitor the performance and compliance of third-party service providers. 5. Information Sharing: - Engage in information sharing regarding ICT risks and incidents to enhance industry-wide unders...
audit carried out by an accredited assessor to verify that the controls are effectively applied within the organisation’s IT infrastructure. This level provides greater assurance and is often required by government departments and major partne...
auditing management systems. What Should You Do if You Want to Implement a Quality Management System? To develop and implement a quality management system, an organization should determine the applicable requirements based on its activities...
audit... What is an environmental management system? Part of the overall management system which includes organizational structure, planning activities, responsibilities, methods, procedures, processes and resources for the development, implementation, e...
auditors in organizations with policies and regulations applicable standards; providing clients with relevant information about information security. In order to safeguard its information, the organization must take the following steps: ...
audit methodology that assesses compliance with ethical standards, labor rights, health and safety conditions, and environmental impact. Companies undergoing a SMETA audit demonstrate a commitment to social responsibility and ethical supply chain man...
audits, management reviews and improvement processes. Integration goes beyond simply combining documentation. It requires management processes to be aligned while ensuring that the specific requirements of each applicable standard are met. Which ...
What additional requirements apply to suppliers in the defence industry? For companies with a quality management syst...
Changing a supplier may seem like a routine commercial decision, while extending a product's shelf life may be seen ...
NATO quality assurance requirements are of practical importance to Bulgarian companies that manufacture defence-related ...
Every October, Europe marks European Cybersecurity Month (ECSM), an annual European initiative to raise cybersecurity aw...
Ahead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
On 16 September 2026, the International Organization for Standardization (ISO) officially published ISO 9001:2026 &ndash...
The International Organization for Standardization (ISO) will officially launch the new edition of the world’s mos...
The new edition of the world’s most widely used international standard for quality management systems – ISO ...
The German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
In April 2026, the International Organization for Standardization published the new edition of ISO 14001 &ndas...
The new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
After 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
FSSC 22000 released Version 7 of its food safety management system certification scheme on May 1, 20...
On 15 April 2026, ISO published the fourth edition of ISO 14001 — the world's most widely adopted in...
In April 2026, the official publication of the new version of the international standard ISO 14001:2026 is expected...
With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
With the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
In recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
2025 established itself as a year of significant change in the fields of management standards, information security...
With the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
Stay ahead of requirements and protect your certification Revisions to standards are a natural part of continuous imp...
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
In 2025, the International Organization for Standardization (ISO) published some of the most significant chang...
In the world of quality management, continual improvement is not merely a goal but a fundamental principle. The intern...
In August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
August 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
Double the Power for Your Information Security With over a decade of consultancy experience and dozens of successfu...
We inform you that on May 14, 2025, IFS officially introduced the updated IFS ESG Compliance Check tool – part of ...
In the digital age, cybersecurity is a key element for the success of any organization. With the increasing threat of ...
The draft amendments to the Bulgarian Cybersecurity Act aim to transpose Directive (EU) 2022/2555 (known as the NIS2 D...
In today’s business landscape, sustainable development and environmental responsibility are key drivers of long-...
Regulation (EU) 2024/2847 of the European Parliament and of the Council, better known as the Cyber Resilience Act (CRA),...
Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI) sets out a framework for the deve...
At a meeting of the Council of Ministers held on 03.07.2024, the government approved draft laws amending and supplementi...
What organisations should do about Amendment 1: Climate change changes to ISO 9001, ISO 14001, ISO 4500...
On 13 June 2024, the European Parliament and the Council adopted Directive (EU) 2024/1760 on corporate sustainability du...
Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
The European Environmental Management and audit Scheme (EMAS) is a voluntary EU scheme for companies and org...
The first audits under IFS Food version 8 start on 1 October 2023. Version 7 audits can be conducted until the end of De...
FSSC 22000 is an internationally recognized food safety audit and certification scheme for organizations in the food sup...
SMETA (SEDEX Members Ethical Trade audit) is a widely recognized audit to assess the social and ethical performance of s...
CHANGES IN MANAGEMENT SYSTEMS In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
The Council of the EU has agreed on its position on the European Commission's proposal for a Directive on corporat...
Municipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
ISO has published the new version of ISO/IEC 27001 under the title "Information security, cybersecurity and pr...
Taking into account the rapidly changing cybersecurity environment, ISOs are updating information security standards. Ea...
TISAX is an assessment and exchange mechanism for the information security of enterprises in the automotive supply chain...
In October 2020, IFS Food "Food Quality and Safety audit Standard" version 7.0 was published. The ne...
At the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
Protecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
You simply can’t be too careful when it comes to information security. Protecting personal records and commerciall...
With the eyes of the world on the 2014 Olympic Games in Sochi, hundreds of ISO standards will make the games a safe and ...
ISO 9001, Quality Management Systems - Requirements, has reached the Committee Draft stage of the revision process. Like...
IFS would like to inform you about modifications in the IFS Food Standard. These updates apply from 1st April 2013. T...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































