Your rating 0 from 0 votes
28 results found for "information security" in pages:
About usinformation security management, risk management, business continuity, personal data protection, ESG and sustainability, as well as support for EcoVadis assessments, NIS2 and DORA compliance, and compliance with other applicable European regulatory r...
Why to choose CONSEJO?information security... Why Choose CONSEJO? Choosing the right consulting partner when implementing a management system has a direct impact on the quality of the final outcome. A well-managed implementation project involves much more than preparing documentation. It requ...
Privacy Noticeinformation security... CONSEJO Ltd. is a controller of personally identifiable information (PII), according to the meaning of the REGULATION (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free moveme...
Implementation of management standardsinformation security... The service Development and implementation of management standards performed by CONSEJO includes identification of the current business model, development and implementation of Management Systems (MS) and the Integrated Management System (IMS) based ...
IT audit (Information systems audit)information security within the organization with respect to data protection. This assessment is conducted through the implementation of best practices in information security management, in accordance with the requirements of the Cybersecurity Act, ...
Testing of Security of Information Systemsinformation security... NETWORK PENETRATION TESTING Penetration test is a methods and techniques to gain access to information systems. Its main goal is to identify the presence of vulnerabilities allowing malicious people to establish access to your systems and personal a...
Phishing Simulations for Employeesinformation security awareness, education and training. DORA: Financial organisations must conduct digital operational resilience awareness and training programmes for their employees. How It Works Scope and rules. We agree on which empl...
ISO 20000-1 Service managementinformation security, the ISO/IEC 20000 standard contains a reference to the ISO/IEC 27001 standard. The optimal option for the most effective process management in the IT sector is the implementation of an integrated management system, accordin...
ISO 22301 Business continuity management systemsinformation security... ISO 22301 defines the requirements for the development and implementation of an efficient Business continuity management system (BCMS). ISO 22301 describes the main elements of managing business continuity: Planning, establishin...
ISO/IEC 27001 Cybersecurity and Privacy Protectioninformation security management system (ISMS). The standard provides a framework for systematically managing information security risks. The management system aims to preserve the confidentiality, integrity and availability of information by apply...
ISO/IEC 27017:2015 Code of practice for information security controlsinformation security within cloud environments. As part of the ISO/IEC 27000 family, it extends ISO/IEC 27002 by introducing additional controls and guidance tailored to cloud technologies. The standard’s main goal is to support both cloud ser...
ISO/IEC 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processorsinformation security and personal data protection in cloud environments. What ISO/IEC 27018:2025 Is ISO/IEC 27018:2025 provides additional controls and guidance specific to public cloud services, building upon general information secur...
ISO/IEC 27032 Guidelines for Internet securityinformation security management standards, such as ISO/IEC 27001 and ISO/IEC 27002. Key Aspects of ISO/IEC 27032 Interconnection Between Cybersecurity and Internet Security: The standard examines the relationship between cybersecurity, web sec...
NIST SP 800-53information security, containing references to many other standards in this field. NIST SP 800-53 is designed to provide a framework of elements, strategies, systems, and controls for each organization's cybersecurity needs and priorities. Bec...
ISO 21434 Road vehicles Cybersecurity engineeringinformation security... ISO/SAE 21434 Road vehicles – Cybersecurity engineering specifies the engineering requirements for cybersecurity risk management in relation to the conception, product development, manufacture, operation, maintenance and decommissioning of elec...
ISO/IEC 42001 Artificial intelligenceinformation security, ISO/IEC 42001 defines how an organization manages the entire life cycle of its AI systems: from planning and development, or supplier selection, through deployment and monitoring, to decommissioning. Organizations can be certif...
ISO/IEC 27701 information security, cybersecurity and privacy protectioninformation security; • Integration with other management systems — enables combination with ISO/IEC 27001, ISO 9001, ISO 22301, and others; • Competitive advantage — certified organizations gain greater trust a...
GDPR (General Data Protection Regulation)information security management. From 25 May 2018, controllers and processors are legally required to implement technical and organisational measures appropriate to the level of risk to the rights and freedoms of natural persons. Such measures may i...
Bulgarian Cybersecurity Actinformation security... The Bulgarian Cybersecurity Act (promulgated in State Gazette No. 94 of 13 November 2018, as amended and supplemented, SG No. 17 of 13 February 2026) is the principal legislative act governing the protection of network a...
Ordinance on the Minimum Requirements for Network and information securityinformation security; In the event of a security incident, notification must be submitted within two hours after becoming aware of the incident; Full and detailed information regarding the incident must be submitted within five days; Incid...
Law on the Protection of Persons Reporting Breachesinformation security frameworks; provision of a Data Protection Officer, who may also perform the functions assigned under the Law. ...
Regulation (EU) 2024/1689information security, privacy and risk management processes. In particular, ISO/IEC 42001 (Artificial Intelligence Management System – AIMS) provides a structured governance framework that supports organisations in establishing AI management p...
SOC 2 (Service Organisation Control Type 2)information security. SOC 2, or Service Organization Control Type 2, is an auditing and attestation framework developed by the American Institute of Certified Public Accountants (AICPA). Its main purpose is to ensure that service providers ...
TISAX (Trusted information security Assessment Exchange)information security assessment results within the automotive industry. TISAX was developed on the initiative of the German Association of the Automotive Industry (VDA) and is operated by the ENX Association. Its primary purpose is to provide a comm...
NIS2 (DIRECTIVE (EU) 2022/2555)information security policies; incident handling procedures; business continuity, including backup management and disaster recovery; supply chain security and management of relationships with direct suppliers; security in the acquisition, dev...
DORA (Regulation (EU) 2022/2554)information security... DORA (REGULATION (EU) 2022/2554) Regulation (EU) 2022/2554 on digital operational resilience for the financial sector was adopted on 14 December 2022 by the European Parliament and the Council of the EU and aims to prevent and mitigate the risk of...
Cybersecurity, information securityinformation security management; evaluation of existing management processes of information security; establish the compliance of internal and external auditors in organizations with policies and regulations applicable standards; providing clie...
Integrated Management Systeminformation security management – ISO/IEC 20000-1 and ISO/IEC 27001; information security and business continuity management – ISO/IEC 27001 and ISO 22301; Quality, security, and business continuity management – ISO 9001, ISO 28...
62 results found for "information security" in news:
NIS2 Registration in Bulgaria: Who Is Required to Register and What Are the Requirements?The transposition of Directive (EU) 2022/2555 (NIS2) into Bulgarian law expands the range of organisations subject to cy...
European Cybersecurity Month 2026: Are Employees Prepared for Cyber Threats?Every October, Europe marks European Cybersecurity Month (ECSM), an annual European initiative to raise cybersecurity aw...
The Human Factor in information security: Why Technology Is Not EnoughAhead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
European Cybersecurity Month 2026: The Human Factor in FocusToday, the Court of Justice of the European Union in Luxembourg is hosting the official kick-off event for European Cybe...
information security and Cybersecurity Is There a Difference?The digitalization of business processes, the use of cloud services, remote working, and the growing volume of informati...
Artificial Intelligence and Sustainable Tourism: How Technology Is Transforming the
Management
and Quality of Tourism ServicesTourism is one of the sectors in which digital technologies are transforming both the way services are delivered and cus...
New EU AI Act Requirements Take Effect TodayAs of today, 2 August 2026, Regulation (EU) 2024/1689 on Artificial Intelligence (the EU AI Act) reaches another key imp...
VDA Releases the VDA ISA2027 CatalogueThe German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
Regulation (EU) 2024/1689 enters a new phase on 2 August 2026On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
NIST Cybersecurity Framework 2.0 (NIST CSF 2.0)The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
ISO 19011:2026: updated guidance for auditing management systemsThe new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
7 June World Food Safety DayOn 7 June, the world marks World Food Safety Day – an initiative of the World Health Organization and the Food and...
Ten Days Until Sanctions Under the Cybersecurity Act Apply in FullAfter 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
How ISO/IEC 27001 Supports Compliance with the Bulgarian Cybersecurity Act (NIS2)With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
Action Plan Against CyberbullyingOn 10 February 2026, on the occasion of Safer Internet Day, the European Commission presented the EU Action Pla...
Safer Internet Day 2026 Together for a Safer Online World10 February 2026 — Today marks Safer Internet Day – a global initiative that promotes the safer, more respon...
Parliament Adopted at Second Reading Amendments to the Cybersecurity Act in Connection with
NIS 2After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
Why ISO Standards Are Becoming Crucial in Public ProcurementIn recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
How to Choose the Right Consulting Organization?In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
Key Changes in International Standards and Regulatory Requirements in 20252025 established itself as a year of significant change in the fields of management standards, information security...
ISO/IEC 42005:2025 a standard for assessing the impact of artificial intelligence systemsWith the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
ISO/IEC 27071: Security and Trust Between Devices and ServicesWith the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
ISO/IEC 27701:2025 A New Era in Privacy ManagementISO/IEC 27701:2025 – information security, cybersecurity and privacy protection — Privacy information manage...
ISO/IEC 27701:2025 The New Standard for Privacy, AI and Cloud TechnologiesOn 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
ISO 54002:2025 The New Quality Management Standard for Police OrganizationsNew Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
ISO/IEC 27018:2025: Updated Guidelines for PII Protection in Cloud EnvironmentsIn August 2025, the third edition of the standard ISO/IEC 27018:2025 – "information security, cybersecurity a...
ISO/IEC 27018:2025 Enhanced Protection of Personal Data in the CloudAugust 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
NEW: Network and information security Specialist as a ServiceDouble the Power for Your information security With over a decade of consultancy experience and dozens of successfu...
Amendments to the Law on the Protection of Persons Reporting BreachesIn the State Gazette, Issue No. 38 of 2025, amendments and supplements to the Law on the Protection of Persons Reporting...
ISO/IEC 27017 information security Standard for Cloud ServicesIn the era of digital transformation, an increasing number of organizations are shifting their operations, data, and...
How to Protect Your Data in the Digital AgeIn the digital age, cybersecurity is a key element for the success of any organization. With the increasing threat of ...
If Cybercrime Were a Country, It Would Rank Third in GDP in 2024In 2024, the global economy saw a growth of 3.2% compared to the previous year, reaching approximately 105 t...
International Summit on AI Standards December 2025The first of its kind International Summit on AI Standards will take place on December 2-3, 2025, in Seoul. The initia...
Post-Quantum Cryptography: The Future of CybersecurityWith the development of quantum computers, traditional cryptographic algorithms such as RSA, ECC (Elliptic Curve Cryptog...
Impact Analysis of Cyber AttacksWhether it’s an attempt to breach the network or a complete shutdown of information systems, cyber-attacks are hig...
DORA - New Cybersecurity Requirements in the EU Financial SectorRegulation (EU) 2022/2554, known as the Digital Operational Resilience Act (DORA), will take effect on January 17, ...
Regulation (EU) 2024/1689 on artificial intelligence rulesRegulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI) sets out a framework for the deve...
How NIS 2 relates to ISO/IEC 27001Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
What is ISMS and why do you need it?Today, every organisation faces threats such as hacking, ransomware and careless data handling. An information security ...
ISO/IEC 27035-1:2023 AND ISO/IEC 27035-2:2023 WITH NEW VERSIONSEarlier this week, the Bulgarian Standards Institute published BDS ISO/IEC 27035-1:2023 Information technology. Informat...
Standards for the protection of automotive securityThe automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
WLA Security Control Standard - security controls in the lottery industryThe WLA Security Control Standard (WLA SCS) is an information security management framework developed by the World Lotte...
ISO/SAE 21434:2021 Road vehicles Cybersecurity engineeringISO/SAE 21434:2021 is an international standard that addresses cyber security in the engineering of electrical and ...
Transition to the Requirements of ISO/IEC 27001:2022CHANGES IN MANAGEMENT SYSTEMS In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
Threat Intelligence: Responding to the New information security ThreatsNew developments in cyber security threats have pushed companies to look for new ways to protect themselves and their ...
When Do Municipal Enterprises Fall Under Cybersecurity RequirementsA Practical Assessment Test for the Management of Municipal Enterprises on the Applicability of the Cybersecurity Act an...
Regulatory Cybersecurity Obligations of Municipal EnterprisesMunicipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
ISO/IEC 27005:2022 What Has Changed in information security Risk ManagementIn October 2022, the new edition of ISO/IEC 27005, information security, cybersecurity and privacy protection — Gu...
ISฮ/IลC 27001:2022 has been publishedISO has published the new version of ISO/IEC 27001 under the title "information security, cybersecurity and pr...
Financial Assistance to Improve Information and Communication Technologies in Small and
Medium-sized EnterprisesEU is giving 30 600 000 of financial assistance in support of procedure BG-RRP-3.005 “Improving Information and ...
Upcoming version of ISO 27001: new controls from 2022Taking into account the rapidly changing cybersecurity environment, ISOs are updating information security standards. Ea...
Cybersecurity Act Amended(promulgated in the State Gazette, No. 25 of 29 March 2022) In State Gazette, No. 25 of 29 March 2022, an amendment t...
Amendments to the Cybersecurity Act Scope and Key AspectsIn State Gazette, No. 25 of 29 March 2022, amendments to the Cybersecurity Act were promulgated. These amendments intr...
New version of ISO/IEC 27002On 15 February 2022 the international organization ISO published the new version of ISO/IEC 27002 "Information...
Cybersecurity in CarsNew standard just published to help keep the hackers at bay As our cars get more connected, the risk of cybersecurity b...
TISAX - Mechanism for Assessing the Security and Reliability of Information in the Automotive
IndustryTISAX is an assessment and exchange mechanism for the information security of enterprises in the automotive supply chain...
The Guide for Auditors of information security Management Systems Has Been UpdatedAt the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
A new standard has been published to support the privacy information managementThe world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
An Updated Version of ISO/IEC 27005 information security Risk Management Has Been
PublishedProtecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
How to measure the effectiveness of information security?You simply can’t be too careful when it comes to information security. Protecting personal records and commerciall...
ISO/IEC 27040:2015 Information technology - Security techniques - Storage securityAt the beginning of 2015, the international standard ISO/IEC 27040:2015 Information technology — Security techniqu...
Latest issue of The ISO Survey shows 16% rise in ISO 9001 and ISO 14001 certificationsCertification to ISO 9001 (for quality management) and to ISO 14001 (for environmental management) increased in both cas...
News
12
10.26
NATO Quality Assurance Standards Gain Attention in Defence Industry Investment
NATO quality assurance requirements are of practical importance to Bulgarian com...
25
09.26
European Cybersecurity Month 2026: The Human Factor in Focus
Today, the Court of Justice of the European Union in Luxembourg is hosting the o...
Accents
06
11.26
AQAP-2110: Beyond ISO 9001 Requirements
What additional requirements apply to suppliers in the defence industry?
For ...
20
10.26
Change Management in the Food Sector: When Is a New Risk Assessment Necessary?
Changing a supplier may seem like a routine commercial decision, while extending...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
Partners
