IMPLEMENTATION OF MANAGEMENT STANDARDS
Your rating 0 from 0 votes


14 results found for "data protection" in pages:
  About us
data protection, ESG and sustainability, as well as support for EcoVadis assessments, NIS2 and DORA compliance, and compliance with other applicable European regulatory requirements. To date, the CONSEJO team has contributed to the successful comp...

  Privacy Notice
data protection... CONSEJO Ltd. is a controller of personally identifiable information (PII), according to the meaning of the REGULATION (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free moveme...

  IT audit (Information systems audit)
data protection. This assessment is conducted through the implementation of best practices in information security management, in accordance with the requirements of the Cybersecurity Act, the Regulation on Minimum Network and Information Security Re...

  Implementation of the GDPR (Regulation 2016/679)
data protection; data protection levels; the level of consistency of the data; data management rights; data compromise notification mechanisms; actions in international data transfers; data protection roles and responsibilities; the ove...

  data protection officer
data protection, supervision of compliance with Regulation (EU) 2016/679 and PDPA and staff awareness and tràining. The Regulation provides for a data protection officer to have only certain categories of personal data controllers, as: ...

  Implementation of a regulatory requirement
data protection... THE STAGES OF CONSULTATION FOR THE IMPLEMENTATION OF A REGULATORY REQUIREMENT CAN BE CONVENTIONALLY DIVIDED INTO: GAP analysis and evaluation of the current level of compliance; Preparation of rules and procedures for fulfilling the requirement...

  ISO/IEC 27017:2015 Code of practice for information security controls
data protection has become a critical priority for every organization. While cloud services offer significant benefits, they also introduce risks related to safeguarding sensitive information. To address these risks and strengthen security in cloud e...

  ISO/IEC 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processors
data protection in cloud environments.   What ISO/IEC 27018:2025 Is ISO/IEC 27018:2025 provides additional controls and guidance specific to public cloud services, building upon general information security controls. The standard applies...

  ISO/IEC 42001 Artificial intelligence
data protection impact assessment, or DPIA; an integrated ISO/IEC 27001 + ISO/IEC 42001 system is possible, with common processes and a combined certification audit — lower costs and less administrative burden. For organizations with an ex...

  ISO/IEC 27701 Information security, cybersecurity and privacy protection
data protection. It extends the foundations of information security by incorporating a modern approach to privacy management, in line with current legal and ethical requirements. Its implementation not only ensures compliance but also enhances corp...

  GDPR (General data protection Regulation)
data protection measures. With the entry into force, in May 2016, of Regulation (EU) 2016/679 of the European Parliament and of the Council – the General data protection Regulation (GDPR) – on the protection of natural persons with regar...

  Law on the Protection of Persons Reporting Breaches
data protection... In 2023, the Law on the Protection of Persons Reporting or Publicly Disclosing Information on Breaches was introduced into Bulgarian legislation. The Law transposes the requirements of Directive (EU) 2019/1937 on the protection of persons who re...

  TISAX (Trusted Information Security Assessment Exchange)
data protection Prototype Protection, where applicable. The catalogue places strong emphasis on risk management and the protection of information throughout the automotive supply chain.   What are the benefits of TISAX? Successful comp...

  DORA (Regulation (EU) 2022/2554)
data protection, and audit rights. - Establish mechanisms to monitor the performance and compliance of third-party service providers.   5. Information Sharing: - Engage in information sharing regarding ICT risks and incidents to enhance...

23 results found for "data protection" in news:
  ​European Commission Presents the European Technological Sovereignty Package
The European Commission has presented the European Technological Sovereignty Package, one of the most significant initia...

  Regulation (EU) 2024/1689 enters a new phase on 2 August 2026
On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...

  How ISO/IEC 27001 Supports Compliance with the Bulgarian Cybersecurity Act (NIS2)
With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...

  ​Amendments to the Cybersecurity Act
With the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...

  Action Plan Against Cyberbullying
On 10 February 2026, on the occasion of Safer Internet Day, the European Commission presented the EU Action Pla...

  Key Changes in International Standards and Regulatory Requirements in 2025
2025 established itself as a year of significant change in the fields of management standards, information security...

  ​ISO/IEC 42005:2025 – a standard for assessing the impact of artificial intelligence systems
With the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...

  ISO/IEC 27071: Security and Trust Between Devices and Services
With the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...

  ISO/IEC 27701:2025 — A New Era in Privacy Management
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...

  ISO/IEC 27018:2025 – Enhanced Protection of Personal Data in the Cloud
August 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...

  ​ISO/IEC 27018:2025: Updated Guidelines for PII Protection in Cloud Environments
In August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...

  NEW: Network and Information Security Specialist as a Service
Double the Power for Your Information Security With over a decade of consultancy experience and dozens of successfu...

  ​Amendments to the Law on the Protection of Persons Reporting Breaches
In the State Gazette, Issue No. 38 of 2025, amendments and supplements to the Law on the Protection of Persons Reporting...

  ​How to Protect Your Data in the Digital Age
In the digital age, cybersecurity is a key element for the success of any organization. With the increasing threat of ...

  If Cybercrime Were a Country, It Would Rank Third in GDP in 2024
In 2024, the global economy saw a growth of 3.2% compared to the previous year, reaching approximately 105 t...

  ​Impact Analysis of Cyber Attacks
Whether it’s an attempt to breach the network or a complete shutdown of information systems, cyber-attacks are hig...

  How NIS 2 relates to ISO/IEC 27001
Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...

  ​What is ISMS and why do you need it?
Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...

  Differences between NIS and NIS 2 directives
The European Union's cybersecurity rules, introduced in 2016, have been updated by Directive (EU) 2022/2555 of ...

  Whistleblowing Law
The Law on protection of persons reporting or publicly disclosing information on breaches (the "Whistleblowing&nb...

  When Do Municipal Enterprises Fall Under Cybersecurity Requirements
A Practical Assessment Test for the Management of Municipal Enterprises on the Applicability of the Cybersecurity Act an...

  A new standard has been published to support the privacy information management
The world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...

  An Updated Version of ISO/IEC 27005 – Information Security Risk Management Has Been Published
Protecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...

News
12
10.26
NATO Quality Assurance Standards Gain Attention in Defence Industry Investment
NATO quality assurance requirements are of practical importance to Bulgarian com...
25
09.26
European Cybersecurity Month 2026: The Human Factor in Focus
Today, the Court of Justice of the European Union in Luxembourg is hosting the o...
Accents
06
11.26
AQAP-2110: Beyond ISO 9001 Requirements
What additional requirements apply to suppliers in the defence industry? For ...
20
10.26
​Change Management in the Food Sector: When Is a New Risk Assessment Necessary?
Changing a supplier may seem like a routine commercial decision, while extending...

Implementation of management standards

CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.

The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.

See more
Partners