development, implementation and maintenance of management systems and in supporting organizations in achieving compliance with international standards and regulatory requirements. Since its establishment, CONSEJO has worked with organizations acro...
development and implementation of Management Systems (MS) and the Integrated Management System (IMS) based on International standards: ISO 9001 Quเlity management systems. Requirements ISO 14001 Environmental management systems. Requirem...
development. The maintenance of management system allows for: Timely updating of the documentation with respect to changes in legislation, or internal organization of the company; Smooth functioning of supervisory and p re-certificat...
development... Legal Compliance Assessment CONSEJO offers professional compliance assessment services tailored to companies from various industries aiming to ensure compliance with applicable regulatory requirements. Our team of experts provides comprehensive su...
development for the defence industry. Developers of software and electronic systems for defence applications. Suppliers and subcontractors involved in defence contracts. Organisations providing repair, modernisation and maintenance services for...
development... What is ISO 9001? ISO 9001 is an international standard that specifies requirements for quality management systems. It provides a framework for managing processes and supports organizations in consistently providing products and services that meet c...
development of international criteria for beach management and safety. By implementing it, beach operators will be able to make better informed decisions about the management, based on best practices. In ISO 13009, risk management procedures ...
development; production; storage; distribution; installation; servicing; related activities, such as technical support. ISO 13485 can also be used by suppliers and external organizations that provide products or services to organizatio...
development or location, that wishes to improve its environmental performance. History of ISO 14001 • first edition published in 1996; • revised in 2004; • third edition, published on 15 September 2015; • am...
development and trade efforts in regions where the capacity of social institutions is overwhelmed by human and natural destructive events. ISO 18788 provides an opportunity to differentiate organizations that can provide services according to th...
development and implementation of an efficient Business continuity management system (BCMS). ISO 22301 describes the main elements of managing business continuity: Planning, establishing, implementing, operation, monitoring, review, analysis...
development. The controls in Annex A are not intended to be applied automatically by every organization. The organization determines the necessary controls based on the results of the risk assessment and risk treatment process and compares them wi...
development. ISO/IEC 27018:2025: defines clear control objectives and measures for the protection of PII in public cloud environments; is designed to be used in conjunction with ISO/IEC 27002 and supports an ISO/IEC 27001-based I...
development of security policies, access control, incident management, and business continuity. Stakeholders are encouraged to implement cryptographic methods, manage vulnerabilities, and conduct regular staff training. Key highlights include: ...
development and increase trust in the organization. ISO 28000:2022 specifies requirements for a security management system, including aspects that are critical to the security of the supply chain. It requires the organization to: assess...
development activities or the distribution of cosmetic products. ...
development and customization of policies, procedures and control measures; establishment or optimization of the anti-bribery function; integration of ISO 37001 with other management systems (ISO 9001, ISO 14001, ISO/IEC 27001...
development of the International Automotive Task Force – IATF, and the National Automotive Industry Associations – AIAG (US). This standard s supersedes and replaces ISO/TS 16949:2009 and defines the requirements of a quality management ...
development. The standard can be applied by organizations of all sizes and across all sectors. Benefits of Implementing ISO 31000 Implementing ISO 31000 enables organizations to: make informed and consistent decisions; reduce the l...
development of RTS objectives and action plans observing legal and organization-specific requirements; identifying elements associated with the RTS that an organization deems within its sphere of influence; continual development and improvement o...
development of a comprehensive policy to guide activities developing a food safety plan – a HACCP-based hazard and risk assessment system. The standard requires the development of a food safety plan incorporating all Codex Alimentarius princi...
development, consumer confidence, and access to international markets. Food manufacturers, processors, logistics operators, and all organizations throughout the food supply chain face increasingly demanding requirements related to risk management, tr...
development and implementation of occupational health and safety policies and objectives; creating systematic processes that take into account the context, risks and opportunities for the organization, as well as legal requirements; identifying t...
development, manufacture, operation, maintenance and decommissioning of electrical and electronic (E/E) systems in road vehicles, including their components and interfaces. A framework is defined that includes requirements for cybersecurity proces...
development, or supplier selection, through deployment and monitoring, to decommissioning. Organizations can be certified against the standard — by undergoing an audit by an accredited certification body and obtaining an internationally recogn...
development and maintenance of a privacy policy, performing risk assessment and privacy impact assessment (PIA), as well as managing incidents and continuously improving the Privacy Information Management System. Main Changes Compared w...
development of information technologies and international trade in recent decades has created the need to update the existing personal data protection measures. With the entry into force, in May 2016, of Regulation (EU) 2016/679 of the European Parl...
development and maintenance; vulnerability handling and disclosure; access control policies and asset management; use of cryptography and encryption; multi-factor authentication; training and cyber hygiene. The measures must ensure a lev...
development of internal rules and registers; integration of the Law’s requirements into quality management systems and information security frameworks; provision of a Data Protection Officer, who may also perform the functions assigned unde...
development, placing on the market, putting into service and use of AI systems, while promoting innovation and ensuring the protection of fundamental rights, health, safety and democracy, as well as fostering the development and uptake of trustworthy...
development or production of products for the defence sector when the relevant requirements are included in the contract terms. AQAP-2310 – NATO Quality Assurance Requirements for Aviation, Space and Defence Suppliers AQAP-2310 is intended fo...
development... The International Standard ISO 50001 focuses on supporting organizations in their efforts to establish systems and processes necessary for better energy performance including energy efficiency, energy use and energy consumption. Implemen...
development consulting services. We have an expert team with extensive experience in environmental management and specialise in assisting organisations of all sizes and sectors with EMAS registration. We offer an individual approach tailored to the s...
development, production and maintenance of automotive products and services. In many cases, holding an appropriate TISAX Label is a prerequisite for participating in projects with automotive manufacturers and their suppliers. How does the TISAX a...
development, non-discrimination and other labor and human rights issues. Ethics – measures to prevent corruption and conflicts of interest, responsible information management and other relevant aspects of business ethics. Sustainable Procur...
development and the social environment in which they operate. It is important to note that this is not a certification standard but a guidance document to help organisations understand and apply the principles of social responsibility. ISO 260...
development and maintenance of network and information systems, including vulnerability management and disclosure; policies and procedures for assessing the effectiveness of cybersecurity risk management measures; cybersecurity training and basic...
development and delivery to after-sales service. A Quality Management System (QMS) is a set of policies, processes, responsibilities and resources through which an organization manages the quality of its products and services and improves it...
development, implementation, execution, evaluation and policy to protect the environment. Implementation of environmental management system (EMS) according to ISO 14001 is voluntary and is intended to demonstrate the concern of the organization to...
development and introduction of physiological regimes of work and rest during work; Safety data sheets for the chemicals and mixtures used; Indication of the existing hazards and sources of harmful to health and safety, according to Ordinance น R...
development and implementation of a food safety system is based on the following international standards, laws and regulations of Bulgarian and European legislation: HACCP – General Principles of Food Hygiene CXC 1-1969 ISO 22000 Food s...
development, implementation, integration and maintenance of management systems in accordance with international standards. We support organisations in establishing new integrated management systems, integrating existing systems and extending them to...
What additional requirements apply to suppliers in the defence industry? For companies with a quality management syst...
NATO quality assurance requirements are of practical importance to Bulgarian companies that manufacture defence-related ...
Ahead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
Tourism is one of the sectors in which digital technologies are transforming both the way services are delivered and cus...
The European Commission has presented the European Technological Sovereignty Package, one of the most significant initia...
The German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
In April 2026, the International Organization for Standardization published the new edition of ISO 14001 &ndas...
The International Organization for Standardization (ISO) has published ISO 32212:2026 — a new international s...
On 7 June, the world marks World Food Safety Day – an initiative of the World Health Organization and the Food and...
After 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
FSSC 22000 released Version 7 of its food safety management system certification scheme on May 1, 20...
In April 2026, the official publication of the new version of the international standard ISO 14001:2026 is expected...
The quality of tourism services provided at coastal and other beaches depends on multiple factors, including safety, inf...
Regulation (EU) 2024/2847 – better known as the Cyber Resilience Act (CRA) – is now part of the le...
In February 2026, the International Organization for Standardization (ISO) published ISO 14092:2026, “Clima...
With the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
Today, organizations are facing increasing environmental challenges, including climate change, biodiversity loss, resour...
In recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
Artificial intelligence (AI) is increasingly recognised as a key driver of economic growth, digital transformation, and ...
In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
2025 established itself as a year of significant change in the fields of management standards, information security...
With the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
The International Organization for Standardization (ISO) is in a decisive phase of revising the world’s most ...
In 2025, the International Organization for Standardization (ISO) published some of the most significant chang...
“GAME ON!” – Behavioral Change Towards Digital Threats October 2025 will once again be dedi...
In the world of quality management, continual improvement is not merely a goal but a fundamental principle. The intern...
New Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
In August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
August 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
On July 30, 2025, the European Commission adopted a recommendation on the Voluntary Sustainability Reporting Standard (V...
The Montreal Protocol on Substances that Deplete the Ozone Layer is one of the most significant international agreements...
Security, stability, and trust in institutions are fundamental to any democratic society. Among these institutions, poli...
In the State Gazette, Issue No. 38 of 2025, amendments and supplements to the Law on the Protection of Persons Reporting...
In today’s world, sustainable development and responsible resource use are key priorities for businesses and soc...
In today’s business landscape, sustainable development and environmental responsibility are key drivers of long-...
The first of its kind International Summit on AI Standards will take place on December 2-3, 2025, in Seoul. The initia...
With the development of quantum computers, traditional cryptographic algorithms such as RSA, ECC (Elliptic Curve Cryptog...
Regulation (EU) 2024/2847 of the European Parliament and of the Council, better known as the Cyber Resilience Act (CRA),...
In today's world, the increasing plastic pollution is driving a growing demand for sustainable alternatives in pac...
Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI) sets out a framework for the deve...
What organisations should do about Amendment 1: Climate change changes to ISO 9001, ISO 14001, ISO 4500...
In the context of growing global awareness of climate change and sustainability, the terms 'corporate responsibili...
The European Union's cybersecurity rules, introduced in 2016, have been updated by Directive (EU) 2022/2555 of ...
The recent 50th meeting of ISO TC 176/SC 2, held from 8-13 October, confirmed the decision for an early revision of the ...
The automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
The WLA Security Control Standard (WLA SCS) is an information security management framework developed by the World Lotte...
FSSC 22000 is an internationally recognized food safety audit and certification scheme for organizations in the food sup...
WORLD METROLOGY DAY We celebrate World Metrology Day every year on May 20 to highlight the importance of metr...
ISO/SAE 21434:2021 is an international standard that addresses cyber security in the engineering of electrical and ...
New developments in cyber security threats have pushed companies to look for new ways to protect themselves and their ...
Municipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
In October 2022, the new edition of ISO/IEC 27005, Information security, cybersecurity and privacy protection — Gu...
EU is giving 30 600 000 of financial assistance in support of procedure BG-RRP-3.005 “Improving Information and ...
Traveling is a wonderful opportunity for rest, extreme experiences and new impressions. We present three ISO standards t...
New standard just published to help keep the hackers at bay As our cars get more connected, the risk of cybersecurity b...
On 30 June 2021, Regulation (EU) 2021/1119 of the European Parliament and of the Council was adopted, establishing a leg...
On 30 June 2021, the European Union adopted Regulation (EU) 2021/1119, known as the European Climate Law, establishing a...
At the end of 2019, the European Commission presented the European Green Deal – a comprehensive strategic framewor...
There are many standards that have an immediate application in dealing with and recovering from the pandemic: these are ...
With the eyes of the world on the 2014 Olympic Games in Sochi, hundreds of ISO standards will make the games a safe and ...
ISO 9001, Quality Management Systems - Requirements, has reached the Committee Draft stage of the revision process. Like...
ISO today published ISO 9001:2008, the latest edition of the International Standard used by organizations in 175 countri...
A suite of new ISO standards offers the international community practical tools to address the global challenge of effec...
ISO has begun the development of ISO 21500, an international standard on project management. BSI British Standards re...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































