data protection, ESG and sustainability, as well as support for EcoVadis assessments, NIS2 and DORA compliance, and compliance with other applicable European regulatory requirements. To date, the CONSEJO team has contributed to the successful comp...
data protection... CONSEJO Ltd. is a controller of personally identifiable information (PII), according to the meaning of the REGULATION (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free moveme...
data protection. This assessment is conducted through the implementation of best practices in information security management, in accordance with the requirements of the Cybersecurity Act, the Regulation on Minimum Network and Information Security Re...
data protection; data protection levels; the level of consistency of the data; data management rights; data compromise notification mechanisms; actions in international data transfers; data protection roles and responsibilities; the ove...
data protection, supervision of compliance with Regulation (EU) 2016/679 and PDPA and staff awareness and tràining. The Regulation provides for a data protection officer to have only certain categories of personal data controllers, as: ...
data protection... THE STAGES OF CONSULTATION FOR THE IMPLEMENTATION OF A REGULATORY REQUIREMENT CAN BE CONVENTIONALLY DIVIDED INTO: GAP analysis and evaluation of the current level of compliance; Preparation of rules and procedures for fulfilling the requirement...
data protection has become a critical priority for every organization. While cloud services offer significant benefits, they also introduce risks related to safeguarding sensitive information. To address these risks and strengthen security in cloud e...
data protection in cloud environments. What ISO/IEC 27018:2025 Is ISO/IEC 27018:2025 provides additional controls and guidance specific to public cloud services, building upon general information security controls. The standard applies...
data protection impact assessment, or DPIA; an integrated ISO/IEC 27001 + ISO/IEC 42001 system is possible, with common processes and a combined certification audit — lower costs and less administrative burden. For organizations with an ex...
data protection. It extends the foundations of information security by incorporating a modern approach to privacy management, in line with current legal and ethical requirements. Its implementation not only ensures compliance but also enhances corp...
data protection measures. With the entry into force, in May 2016, of Regulation (EU) 2016/679 of the European Parliament and of the Council – the General data protection Regulation (GDPR) – on the protection of natural persons with regar...
data protection... In 2023, the Law on the Protection of Persons Reporting or Publicly Disclosing Information on Breaches was introduced into Bulgarian legislation. The Law transposes the requirements of Directive (EU) 2019/1937 on the protection of persons who re...
data protection Prototype Protection, where applicable. The catalogue places strong emphasis on risk management and the protection of information throughout the automotive supply chain. What are the benefits of TISAX? Successful comp...
data protection, and audit rights. - Establish mechanisms to monitor the performance and compliance of third-party service providers. 5. Information Sharing: - Engage in information sharing regarding ICT risks and incidents to enhance...
The European Commission has presented the European Technological Sovereignty Package, one of the most significant initia...
On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
With the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
On 10 February 2026, on the occasion of Safer Internet Day, the European Commission presented the EU Action Pla...
2025 established itself as a year of significant change in the fields of management standards, information security...
With the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
With the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
August 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
In August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
Double the Power for Your Information Security With over a decade of consultancy experience and dozens of successfu...
In the State Gazette, Issue No. 38 of 2025, amendments and supplements to the Law on the Protection of Persons Reporting...
In the digital age, cybersecurity is a key element for the success of any organization. With the increasing threat of ...
In 2024, the global economy saw a growth of 3.2% compared to the previous year, reaching approximately 105 t...
Whether it’s an attempt to breach the network or a complete shutdown of information systems, cyber-attacks are hig...
Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...
The European Union's cybersecurity rules, introduced in 2016, have been updated by Directive (EU) 2022/2555 of ...
The Law on protection of persons reporting or publicly disclosing information on breaches (the "Whistleblowing&nb...
A Practical Assessment Test for the Management of Municipal Enterprises on the Applicability of the Cybersecurity Act an...
The world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
Protecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































