management systems and in supporting organizations in achieving compliance with international standards and regulatory requirements. Since its establishment, CONSEJO has worked with organizations across a wide range of industries, providing practi...
management system has a direct impact on the quality of the final outcome. A well-managed implementation project involves much more than preparing documentation. It requires analysing the organization’s activities, adapting the applicable requi...
management system... CONSEJO Ltd. is a controller of personally identifiable information (PII), according to the meaning of the REGULATION (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free moveme...
management systems. Requirements ISO 14001 Environmental management systems. Requirements with guidance for use ISO/IEC 20000-1 Information Technologies. Service Management. Part 1 Service management system requirement ISO 22000 Food safety man...
management system documentation within the defined transition period. CONSEJO provides professional consulting services for revising and upgrading existing management system documentation in line with the requirements of the new version of the sta...
management system (MS) based of any of the international standards requires continuously maintenance and development. The maintenance of management system allows for: Timely updating of the documentation with respect to changes in legi...
management system (such as WordPress, Joomla, Mambo, etc.), e-commerce websites, etc. Web applications are also among the favourite targets of hackers who can use relatively simple vulnerabilities for getting access to confidential information.&...
management systems (MS) according to ISO 9001, ISO 14001, ISO 20000-1, ISO/IEC 27001, ISO 28000, ISO 45001, ISO 50001, ISO 22000, IFS, BRCGS, etc. The service "Internal audit of MS" is performed by o...
management system documentation (manual, policies, procedures, instructions, operational documents). Support during the Audit: During the audit itself, our experts are available to provide comprehensive support and assistance. This includes on-site...
management system... Legal Compliance Assessment CONSEJO offers professional compliance assessment services tailored to companies from various industries aiming to ensure compliance with applicable regulatory requirements. Our team of experts provides comprehensive su...
management system implemented in accordance with ISO 9001 and for companies planning to establish such a system. Applicable AQAP Standards AQAP-2110 – NATO Quality Assurance Requirements for Design, Development and Production AQAP-2110 inc...
management systems. It provides a framework for managing processes and supports organizations in consistently providing products and services that meet customer requirements and applicable statutory and regulatory requirements. Implementing ISO 9001...
management systems of organizations involved in one or more stages of the life cycle of medical devices. The standard is intended for organizations that need to demonstrate their ability to provide medical devices and related services that meet cust...
management system (EMS), which can be integrated with other management requirements to help organizations achieve both their economic and environmental objectives. The standard emphasizes the identification and assessment of environmental aspec...
management system (SOMS) and provides a framework for establishing, implementing, operating, maintaining and improving of these activities. ISO 18788 enables security organizations and their clients to demonstrate a commitment to comply...
management system for services. It sets out the requirements for the service provider to plan, create, implement, operate, and then monitor, review, maintain and improve this system. Requirements include design, transition, provision and improvement ...
management system in the food chain, when an organization must demonstrate its ability to control food hazards to ensure that each food product is safe at the time of customer consumption. ISO 22000 is applicable to all organizations, regardl...
management system (BCMS). ISO 22301 describes the main elements of managing business continuity: Planning, establishing, implementing, operation, monitoring, review, analysis and continual improvement. The standard requirements are intended ...
management system (ISMS). The standard provides a framework for systematically managing information security risks. The management system aims to preserve the confidentiality, integrity and availability of information by applying a risk management...
management system standards (Annex SL) and is designed to complement other key information security standards, including: ISO/IEC 27001 – The foundational standard for establishing Information Security management systems (ISMS), outl...
management system... ISO/IEC 27018:2025 is an international standard that provides guidelines for the protection of Personally Identifiable Information (PII) in the use of public cloud services. It is part of the ISO/IEC 27000 family of standards and is in...
management systems. Requirements. ISO/IEC 27002 – Information security, cybersecurity, and privacy protection. Information security Controls ISO/IEC 27005 – Information security, cybersecurity, and privacy protection. Guidelines on ma...
management systems. Security management directly contributes to business development and increase trust in the organization. ISO 28000:2022 specifies requirements for a security management system, including aspects that are critical to the se...
management system standards through the application of the latest ISO Harmonized Structure (HS), thereby facilitating the integration of multiple management systems. Scope and applicability ISO 37001 is applicable to any organization, ...
management system... Field of application: GLOBAL Good Agricultural Practices (GLOBALG.A.P) is an integrated program of food production standards in agriculture and aquaculture. GLOBALG.A.P. is part of an internationally accepted set of agricultural standards and is ...
management system for organizations in the automotive industry. IATF 16949 is aligned with and refers to the latest version of the quality management system standard ISO 9001:2015 and follows its structure completely. IATF 16949 is not a stand-alo...
management systems and covers the design, implementation, evaluation, and continual improvement of risk management. The framework includes: leadership and commitment from top management; clear allocation of roles, responsibilities, and authori...
management system for road traffic safety (RTS), in order to assist organizations associated with and impacting the road traffic system to reduce the number of road traffic crashes and the resulting deaths and injuries. The ISO 39001 can be a...
management system creation of prerequisite programs – the basic environmental and operational conditions in the food business necessary for the production of safe food. The current Issue 9 focuses on: promoting understanding ...
management systems; Prerequisite Programmes (PRPs) according to the ISO 22002-x series; additional requirements defined by Foundation FSSC. The combination of these elements creates a comprehensive management system that enables organizatio...
management system. Article 6 Quality Management 1. The producer shall implement a quality management system suitable to demonstrate compliance with the criteria referred to in Articles 3 and 4, respectively. 2. The quality management system shal...
management system. The standard gives guidance to any organization to improve its performance in preventing work-related injuries and illnesses caused. ISO 45001 is applicable to any organization that wonts to establish, implement and maintain occ...
management systems. It provides organizations that develop, provide or use AI systems with a structured and auditable model for the responsible management of artificial intelligence — with risk controls, transparency towards customers and regul...
management systems — Requirements and guidance. It replaces the 2019 edition, which was a technical extension to ISO/IEC 27001 and ISO/IEC 27002. The new edition has been completely revised and now constitutes a stand-alone man...
management system... (Promulgated in State Gazette No. 59 of 26 July 2019, amended SG No. 36 of 13 May 2022, amended SG No. 47 of 24 June 2022) What you need to know The Ordinance sets out specific requirements for ensuring network and information securi...
management systems and information security frameworks; provision of a Data Protection Officer, who may also perform the functions assigned under the Law. ...
management systems certified or aligned with ISO 9001, ISO/IEC 27001 or ISO/IEC 27701, many AI Act requirements can be integrated into existing quality, information security, privacy and risk management processes. In particular, ISO/IEC 42001 (Artif...
management systems in the aviation, space and defence industries and supplements them with specific NATO requirements. AQAP-2210 – NATO Supplementary Software Quality Assurance Requirements to AQAP-2110 or AQAP-2310 AQAP-2210 specifies additi...
management systems, such as ISO 9001, ISO 14001, ISO 45001, ISO 22000 etc. ISO 50001 is based on the continual improvement frame of "Plan-Do-Check-Act" (PDCA) and involves energy management in the everyday act...
management system, the HACCP (Hazard Analysis and Critical Control Points) system and detailed prerequisite programs including GMP (Good Manufacturing Practice), GLP (Good Laboratory Practice) and GHP (Good Hygienic Practice). It includes a requireme...
management system... The Eco-Management and Audit Scheme is a voluntary scheme of the EU that aims to encourage organizations to continually improve their environmental performance by means of implementing a reliable Environmental management system (EMS). The&n...
management systems, right to work, subcontracting, home working and abbreviated environmental assessment. 4 pillars: Labor standards; Health and safety; Environment (extended assessment); Business Ethics. This is an extended ...
management system. The analysis is structured around three core management pillars – Policies, Actions and Results – which demonstrate the extent to which an organization has made specific commitments, implemented measures and monitored i...
management systems that maintain a high level of social accountability. Implementing SA8000 demonstrates your organization’s commitment to social accountability and ethical business practices. Certification to this standard can significant...
management system... Directive (EU) 2022/2555 of the European Parliament and of the Council on measures for a high common level of cybersecurity across the Union is a legislative act aimed at achieving a high common level of cybersecurity throughout the European Union. ...
management systems can be developed in accordance with different international standards, depending on the organization’s activities, sector and applicable requirements. ISO 9001 Quality management systems – Requirements specifies requir...
management system? Part of the overall management system which includes organizational structure, planning activities, responsibilities, methods, procedures, processes and resources for the development, implementation, execution, evaluation and po...
management systems. Requirements ISO 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processors Directive (EU) 2022/2555 (NIS 2) GDPR SOC 2 TISAX An information security mana...
management systems that comply with ESG criteria and support long-term sustainability. Our services include preparation for CSRD reporting, SMETA and SA8000 audits, ISO 26000 guidance, and EcoVadis certification assessments. We help organizations mea...
management system (OH&SMS)? OH&SMS is part of the management system of an organization. It develops and implements the policy of occupational health and safety and manage the risks to health and safety associated with its activities. Im...
management system is an organised set of processes, procedures and rules designed to ensure that food products are safe for consumption. This system includes a set of measures that are implemented by food manufacturers, suppliers and traders to preve...
management system of an organization defines the policies and procedures, that guarantee to the customers a constant quality, safety and security of the offered product and service, regardless of the quantity and term of implementation, as well as co...
management system standards into a unified management framework. It enables an organisation to manage its processes, risks, resources and objectives in a coordinated manner while avoiding unnecessary duplication of activities and documentation. Rath...
What additional requirements apply to suppliers in the defence industry? For companies with a quality management syst...
Changing a supplier may seem like a routine commercial decision, while extending a product's shelf life may be seen ...
NATO quality assurance requirements are of practical importance to Bulgarian companies that manufacture defence-related ...
Ahead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
The digitalization of business processes, the use of cloud services, remote working, and the growing volume of informati...
Tourism is one of the sectors in which digital technologies are transforming both the way services are delivered and cus...
On 16 September 2026, the International Organization for Standardization (ISO) officially published ISO 9001:2026 &ndash...
On 16 September, the world marks the International Day for the Preservation of the Ozone Layer. In 2026, the offici...
The International Organization for Standardization (ISO) will officially launch the new edition of the world’s mos...
The new edition of the world’s most widely used international standard for quality management systems – ISO ...
As of today, 2 August 2026, Regulation (EU) 2024/1689 on Artificial Intelligence (the EU AI Act) reaches another key imp...
The German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
In April 2026, the International Organization for Standardization published the new edition of ISO 14001 &ndas...
The new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
On 7 June, the world marks World Food Safety Day – an initiative of the World Health Organization and the Food and...
After 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
FSSC 22000 released Version 7 of its food safety management system certification scheme on May 1, 20...
On 15 April 2026, ISO published the fourth edition of ISO 14001 — the world's most widely adopted in...
In April 2026, the official publication of the new version of the international standard ISO 14001:2026 is expected...
With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
The quality of tourism services provided at coastal and other beaches depends on multiple factors, including safety, inf...
With the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
Today, organizations are facing increasing environmental challenges, including climate change, biodiversity loss, resour...
In recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
Artificial intelligence (AI) is increasingly recognised as a key driver of economic growth, digital transformation, and ...
In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
2025 established itself as a year of significant change in the fields of management standards, information security...
With the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
With the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
Stay ahead of requirements and protect your certification Revisions to standards are a natural part of continuous imp...
The International Organization for Standardization (ISO) is in a decisive phase of revising the world’s most ...
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
On 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
In 2025, the International Organization for Standardization (ISO) published some of the most significant chang...
In the world of quality management, continual improvement is not merely a goal but a fundamental principle. The intern...
New Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
The Montreal Protocol on Substances that Deplete the Ozone Layer is one of the most significant international agreements...
Security, stability, and trust in institutions are fundamental to any democratic society. Among these institutions, poli...
In the era of digital transformation, an increasing number of organizations are shifting their operations, data, and...
The International Organization for Standardization (ISO) has officially published ISO 37001:2025 — Ant...
On 26 February 2025, the European Commission published the Omnibus I proposal (COM(2025)80), proposing a postponement of...
In today’s business landscape, sustainable development and environmental responsibility are key drivers of long-...
What organisations should do about Amendment 1: Climate change changes to ISO 9001, ISO 14001, ISO 4500...
On 13 June 2024, the European Parliament and the Council adopted Directive (EU) 2024/1760 on corporate sustainability du...
In the context of growing global awareness of climate change and sustainability, the terms 'corporate responsibili...
Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...
Late last week, the International Organization for Standardization (ISO) announced the introduction of amendments to a n...
The recent 50th meeting of ISO TC 176/SC 2, held from 8-13 October, confirmed the decision for an early revision of the ...
The European Environmental Management and Audit Scheme (EMAS) is a voluntary EU scheme for companies and org...
On 3 October 2023, ISO published ISO 7101:2023 "Management of healthcare organisations - Quality management systems...
The automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
Commitments to achieve net zero emissions are increasing among companies, financial institutions, cities, regions and ot...
The WLA Security Control Standard (WLA SCS) is an information security management framework developed by the World Lotte...
FSSC 22000 is an internationally recognized food safety audit and certification scheme for organizations in the food sup...
SMETA (SEDEX Members Ethical Trade Audit) is a widely recognized audit to assess the social and ethical performance of s...
Good distribution practice (GDP) is a quality system for warehouses and distribution centres that handle medicines. GDP ...
ISO/SAE 21434:2021 is an international standard that addresses cyber security in the engineering of electrical and ...
CHANGES IN management systemS In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
The Council of the EU has agreed on its position on the European Commission's proposal for a Directive on corporat...
New developments in cyber security threats have pushed companies to look for new ways to protect themselves and their ...
Municipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
In October 2022, the new edition of ISO/IEC 27005, Information security, cybersecurity and privacy protection — Gu...
ISO has published the new version of ISO/IEC 27001 under the title "Information security, cybersecurity and pr...
EU is giving 30 600 000 of financial assistance in support of procedure BG-RRP-3.005 “Improving Information and ...
Taking into account the rapidly changing cybersecurity environment, ISOs are updating information security standards. Ea...
Traveling is a wonderful opportunity for rest, extreme experiences and new impressions. We present three ISO standards t...
On 15.03.2022 ISO published a new version of the standard ISO 28000:2022 Security and resilience — Security manage...
On 15 February 2022 the international organization ISO published the new version of ISO/IEC 27002 "Information...
New standard just published to help keep the hackers at bay As our cars get more connected, the risk of cybersecurity b...
At the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
The world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
Protecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
You simply can’t be too careful when it comes to information security. Protecting personal records and commerciall...
With the eyes of the world on the 2014 Olympic Games in Sochi, hundreds of ISO standards will make the games a safe and ...
ISO 22301 specifies requirements to plan, establish, implement, operate, monitor, review, maintain and continually impro...
ISO 9001, Quality management systems - Requirements, has reached the Committee Draft stage of the revision process. Like...
ISO today published ISO 9001:2008, the latest edition of the International Standard used by organizations in 175 countri...
Certification to ISO 9001 (for quality management) and to ISO 14001 (for environmental management) increased in both cas...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































