management systems and in supporting organizations in achieving compliance with international standards and regulatory requirements. Since its establishment, CONSEJO has worked with organizations across a wide range of industries, providing practi...
management systems that: improve process management; establish clear roles and responsibilities; reduce operational and compliance risks; enhance control and traceability; provide a solid foundation for continual improvement. Throughou...
management systems. Requirements ISO 14001 Environmental management systems. Requirements with guidance for use ISO/IEC 20000-1 Information Technologies. Service Management. Part 1 Service management system requirement ISO 22000 Food safety man...
management systems... PURPOSE AND BENEFITS OF MAINTENANCE OF MANAGEMENT SYSTEM Successful functioning of each management system (MS) based of any of the international standards requires continuously maintenance and development. The maintenance of management sy...
management systems (MS) according to ISO 9001, ISO 14001, ISO 20000-1, ISO/IEC 27001, ISO 28000, ISO 45001, ISO 50001, ISO 22000, IFS, BRCGS, etc. The service "Internal audit of MS" is performed by o...
management systems. AQAP-2210 – NATO Supplementary Software Quality Assurance Requirements to AQAP-2110 or AQAP-2310 AQAP-2210 is applied alongside AQAP-2110 or AQAP-2310 in contracts involving software development or supply. AQAP-2105 &ndas...
management systems. It provides a framework for managing processes and supports organizations in consistently providing products and services that meet customer requirements and applicable statutory and regulatory requirements. Implementing ISO 9001...
management systems of organizations involved in one or more stages of the life cycle of medical devices. The standard is intended for organizations that need to demonstrate their ability to provide medical devices and related services that meet cust...
management systems, such as ISO 9001, ISO 45001, ISO 50001 and ISO/IEC 27001, thanks to the harmonized high-level structure; • Systematic compliance with regulatory requirements and a significant reduction in the risk of san...
management systems – ISO 9001 and ISO 14001 – and includes the Plan – Do – Check – Act cycle (PDCA or Deming cycle) and the requirement for continuous improvement. According to the requirements of ISO/I...
management systems has the following structure: 1. Scope 2. Normative references 3. Terms and definitions 4. Context of the organization 5. Leadership 6. Planning 7. Support 8. Operation 9. Performance evaluation 10. Improvement Be...
management systems, BCMS consists of the following elements: 1. Policy 2. Personnel with defined responsibilities 3. Processes to be managed, connected to: policy; planning; implementation and operation; eval...
management systems in accordance with ISO/IEC 27001 — from the initial gap analysis and identification of the necessary actions through to preparation for the certification audit. ...
management systems... As businesses increasingly rely on cloud technologies, data protection has become a critical priority for every organization. While cloud services offer significant benefits, they also introduce risks related to safeguarding sensitive information. To...
management systems. Requirements. ISO/IEC 27002 – Information security, cybersecurity, and privacy protection. Information security Controls ISO/IEC 27005 – Information security, cybersecurity, and privacy protection. Guidelines on ma...
management systems. Security management directly contributes to business development and increase trust in the organization. ISO 28000:2022 specifies requirements for a security management system, including aspects that are critical to the se...
management systems. Scope and applicability ISO 37001 is applicable to any organization, regardless of its size, legal form or sector of activity. It can be applied in the public, private and not-for-profit sectors by organizations see...
management systems and covers the design, implementation, evaluation, and continual improvement of risk management. The framework includes: leadership and commitment from top management; clear allocation of roles, responsibilities, and authori...
management systems or unification in the documentation. Participants in the road traffic system are all responsible to bring about reduction in the number of road traffic crashes, and thus implementing ISO 39001 does not free them from observing...
management systems; Prerequisite Programmes (PRPs) according to the ISO 22002-x series; additional requirements defined by Foundation FSSC. The combination of these elements creates a comprehensive management system that enables organizatio...
management systems... Scope ISO 45001 is an international standard that defines the requirements for an occupational health and safety (OHS) management system. The standard gives guidance to any organization to improve its performance in preventing work-related inju...
management systems. It provides organizations that develop, provide or use AI systems with a structured and auditable model for the responsible management of artificial intelligence — with risk controls, transparency towards customers and regul...
management systems — Requirements and guidance. It replaces the 2019 edition, which was a technical extension to ISO/IEC 27001 and ISO/IEC 27002. The new edition has been completely revised and now constitutes a stand-alone man...
management systems... (Promulgated in State Gazette No. 59 of 26 July 2019, amended SG No. 36 of 13 May 2022, amended SG No. 47 of 24 June 2022) What you need to know The Ordinance sets out specific requirements for ensuring network and information securi...
management systems and information security frameworks; provision of a Data Protection Officer, who may also perform the functions assigned under the Law. ...
management systems certified or aligned with ISO 9001, ISO/IEC 27001 or ISO/IEC 27701, many AI Act requirements can be integrated into existing quality, information security, privacy and risk management processes. In particular, ISO/IEC 42001 (Artif...
management systems in the aviation, space and defence industries and supplements them with specific NATO requirements. AQAP-2210 – NATO Supplementary Software Quality Assurance Requirements to AQAP-2110 or AQAP-2310 AQAP-2210 specifies additi...
management systems, such as ISO 9001, ISO 14001, ISO 45001, ISO 22000 etc. ISO 50001 is based on the continual improvement frame of "Plan-Do-Check-Act" (PDCA) and involves energy management in the everyday act...
management systems... The Eco-Management and Audit Scheme is a voluntary scheme of the EU that aims to encourage organizations to continually improve their environmental performance by means of implementing a reliable Environmental Management System (EMS). The&n...
management systems, right to work, subcontracting, home working and abbreviated environmental assessment. 4 pillars: Labor standards; Health and safety; Environment (extended assessment); Business Ethics. This is an extended ...
management systems that maintain a high level of social accountability. Implementing SA8000 demonstrates your organization’s commitment to social accountability and ethical business practices. Certification to this standard can significant...
management systems... Directive (EU) 2022/2555 of the European Parliament and of the Council on measures for a high common level of cybersecurity across the Union is a legislative act aimed at achieving a high common level of cybersecurity throughout the European Union. ...
management systems can be developed in accordance with different international standards, depending on the organization’s activities, sector and applicable requirements. ISO 9001 Quality management systems – Requirements specifies requir...
management systems... What is an environmental management system? Part of the overall management system which includes organizational structure, planning activities, responsibilities, methods, procedures, processes and resources for the development, implementation, e...
management systems. Requirements ISO 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processors Directive (EU) 2022/2555 (NIS 2) GDPR SOC 2 TISAX An information security mana...
management systems that comply with ESG criteria and support long-term sustainability. Our services include preparation for CSRD reporting, SMETA and SA8000 audits, ISO 26000 guidance, and EcoVadis certification assessments. We help organizations mea...
management systems... What is an occupational health and safety management system (OH&SMS)? OH&SMS is part of the management system of an organization. It develops and implements the policy of occupational health and safety and manage the risks to health ...
management systems — Requirements for any organization in the food chain FSSC 22000 Food safety systems certification scheme IFS Food Standard BRCGS Food Safety GLOBALG.A.P. (Good agricultural practices) Food law Law on Measurements...
management systems based on management standards unifies the working process in the organization, reduces the production costs, increases the productivity, increases profits and eliminates inefficient business processes. In a broad sense, th...
management systems, an organisation can integrate common elements such as policies, objectives, responsibilities, control of documented information, internal audits, management reviews and improvement processes. Integration goes beyond simply combin...
What additional requirements apply to suppliers in the defence industry? For companies with a quality management syst...
Changing a supplier may seem like a routine commercial decision, while extending a product's shelf life may be seen ...
NATO quality assurance requirements are of practical importance to Bulgarian companies that manufacture defence-related ...
The digitalization of business processes, the use of cloud services, remote working, and the growing volume of informati...
Tourism is one of the sectors in which digital technologies are transforming both the way services are delivered and cus...
On 16 September 2026, the International Organization for Standardization (ISO) officially published ISO 9001:2026 &ndash...
On 16 September, the world marks the International Day for the Preservation of the Ozone Layer. In 2026, the offici...
The International Organization for Standardization (ISO) will officially launch the new edition of the world’s mos...
The new edition of the world’s most widely used international standard for quality management systems – ISO ...
As of today, 2 August 2026, Regulation (EU) 2024/1689 on Artificial Intelligence (the EU AI Act) reaches another key imp...
On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
In April 2026, the International Organization for Standardization published the new edition of ISO 14001 &ndas...
The new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
On 7 June, the world marks World Food Safety Day – an initiative of the World Health Organization and the Food and...
FSSC 22000 released Version 7 of its food safety management system certification scheme on May 1, 20...
On 15 April 2026, ISO published the fourth edition of ISO 14001 — the world's most widely adopted in...
In April 2026, the official publication of the new version of the international standard ISO 14001:2026 is expected...
With the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
Today, organizations are facing increasing environmental challenges, including climate change, biodiversity loss, resour...
In recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
Artificial intelligence (AI) is increasingly recognised as a key driver of economic growth, digital transformation, and ...
In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
2025 established itself as a year of significant change in the fields of management standards, information security...
With the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
With the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
Stay ahead of requirements and protect your certification Revisions to standards are a natural part of continuous imp...
The International Organization for Standardization (ISO) is in a decisive phase of revising the world’s most ...
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
On 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
In 2025, the International Organization for Standardization (ISO) published some of the most significant chang...
New Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
Security, stability, and trust in institutions are fundamental to any democratic society. Among these institutions, poli...
The International Organization for Standardization (ISO) has officially published ISO 37001:2025 — Ant...
On 26 February 2025, the European Commission published the Omnibus I proposal (COM(2025)80), proposing a postponement of...
In today’s business landscape, sustainable development and environmental responsibility are key drivers of long-...
What organisations should do about Amendment 1: Climate change changes to ISO 9001, ISO 14001, ISO 4500...
On 13 June 2024, the European Parliament and the Council adopted Directive (EU) 2024/1760 on corporate sustainability du...
In the context of growing global awareness of climate change and sustainability, the terms 'corporate responsibili...
Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...
Late last week, the International Organization for Standardization (ISO) announced the introduction of amendments to a n...
The recent 50th meeting of ISO TC 176/SC 2, held from 8-13 October, confirmed the decision for an early revision of the ...
The European Environmental Management and Audit Scheme (EMAS) is a voluntary EU scheme for companies and org...
On 3 October 2023, ISO published ISO 7101:2023 "Management of healthcare organisations - Quality management systems...
Commitments to achieve net zero emissions are increasing among companies, financial institutions, cities, regions and ot...
The WLA Security Control Standard (WLA SCS) is an information security management framework developed by the World Lotte...
SMETA (SEDEX Members Ethical Trade Audit) is a widely recognized audit to assess the social and ethical performance of s...
ISO/SAE 21434:2021 is an international standard that addresses cyber security in the engineering of electrical and ...
CHANGES IN management systems In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
The Council of the EU has agreed on its position on the European Commission's proposal for a Directive on corporat...
In October 2022, the new edition of ISO/IEC 27005, Information security, cybersecurity and privacy protection — Gu...
ISO has published the new version of ISO/IEC 27001 under the title "Information security, cybersecurity and pr...
Taking into account the rapidly changing cybersecurity environment, ISOs are updating information security standards. Ea...
On 15.03.2022 ISO published a new version of the standard ISO 28000:2022 Security and resilience — Security manage...
On 15 February 2022 the international organization ISO published the new version of ISO/IEC 27002 "Information...
New standard just published to help keep the hackers at bay As our cars get more connected, the risk of cybersecurity b...
At the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
The world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
You simply can’t be too careful when it comes to information security. Protecting personal records and commerciall...
With the eyes of the world on the 2014 Olympic Games in Sochi, hundreds of ISO standards will make the games a safe and ...
ISO 22301 specifies requirements to plan, establish, implement, operate, monitor, review, maintain and continually impro...
ISO 9001, Quality management systems - Requirements, has reached the Committee Draft stage of the revision process. Like...
ISO today published ISO 9001:2008, the latest edition of the International Standard used by organizations in 175 countri...
Certification to ISO 9001 (for quality management) and to ISO 14001 (for environmental management) increased in both cas...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































