IMPLEMENTATION OF MANAGEMENT STANDARDS
Your rating 0 from 0 votes


11 results found for "personal data" in pages:
  About us
personal data protection, ESG and sustainability, as well as support for EcoVadis assessments, NIS2 and DORA compliance, and compliance with other applicable European regulatory requirements. To date, the CONSEJO team has contributed to the succes...

  Privacy Notice
personal data and on the free movement of such data. This Privacy Policy provides information on how CONSEJO Ltd. processes collected or received personal data about customers, contractors and users of the site www.consejo.bg. CONSEJO Ltd. 91...

  Implementation of the GDPR (Regulation 2016/679)
personal data, and in the processing of such data using IT tools. The assessment criteria are both the requirements of REGULATION (EU) 2016/679 and the use of control mechanisms and good practices set out in ISO 27001 and ISO 2700...

  Data protection officer
personal data controller or a person external to the personal data controller charged with advisory functions in the field of personal data protection, supervision of compliance with Regulation (EU) 2016/679 and PDPA and staff awareness and...

  Phishing Simulations for Employees
personal data... Most successful cyberattacks do not begin with a breach of a firewall, but with a single email that someone has clicked on. A phishing simulation shows what could happen in your organisation before it actually happens. CONSEJO conducts controlled ph...

  ISO/IEC 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processors
personal data protection in cloud environments.   What ISO/IEC 27018:2025 Is ISO/IEC 27018:2025 provides additional controls and guidance specific to public cloud services, building upon general information security controls. The standar...

  ISO/IEC 27032 Guidelines for Internet security
personal data, such as phishing, malware, and combined attacks that can lead to data breaches or identity theft. The standard emphasizes the importance of protecting personal information and online identities while encouraging international cooperati...

  ISO/IEC 42001 Artificial intelligence
personal data, the AIMS is linked to GDPR processes, including the connection between the AI system impact assessment and the data protection impact assessment, or DPIA; an integrated ISO/IEC 27001 + ISO/IEC 42001 system is possible, with common pr...

  ISO/IEC 27701 Information security, cybersecurity and privacy protection
personal data; • implement privacy policies, procedures, and controls.   Purpose and Scope The main objective of ISO/IEC 27701:2025 is to provide organizations with a model for the systematic and transparent management of personal ...

  GDPR (General Data Protection Regulation)
personal data protection measures. With the entry into force, in May 2016, of Regulation (EU) 2016/679 of the European Parliament and of the Council – the General Data Protection Regulation (GDPR) – on the protection of natural persons w...

  Law on the Protection of Persons Reporting Breaches
personal data; security of networks and information systems. The Law also covers: breaches affecting the financial interests of the European Union; breaches of the rules of the EU internal market, including competition and state aid rule...

20 results found for "personal data" in news:
  Regulation (EU) 2024/1689 enters a new phase on 2 August 2026
On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...

  Action Plan Against Cyberbullying
On 10 February 2026, on the occasion of Safer Internet Day, the European Commission presented the EU Action Pla...

  Safer Internet Day 2026 – Together for a Safer Online World
10 February 2026 — Today marks Safer Internet Day – a global initiative that promotes the safer, more respon...

  Why ISO Standards Are Becoming Crucial in Public Procurement
In recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...

  Key Changes in International Standards and Regulatory Requirements in 2025
2025 established itself as a year of significant change in the fields of management standards, information security...

  ISO/IEC 27071: Security and Trust Between Devices and Services
With the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...

  ISO/IEC 27701:2025 — A New Era in Privacy Management
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...

  ISO/IEC 27701:2025 – The New Standard for Privacy, AI and Cloud Technologies
On 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...

  European Cybersecurity Month 2025
“GAME ON!” – Behavioral Change Towards Digital Threats   October 2025 will once again be dedi...

  ​ISO/IEC 27018:2025: Updated Guidelines for PII Protection in Cloud Environments
In August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...

  ISO/IEC 27018:2025 – Enhanced Protection of personal data in the Cloud
August 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...

  ​Amendments to the Law on the Protection of Persons Reporting Breaches
In the State Gazette, Issue No. 38 of 2025, amendments and supplements to the Law on the Protection of Persons Reporting...

  Differences between NIS and NIS 2 directives
The European Union's cybersecurity rules, introduced in 2016, have been updated by Directive (EU) 2022/2555 of ...

  Standards for the protection of automotive security
The automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...

  Whistleblowing Law
The Law on protection of persons reporting or publicly disclosing information on breaches (the "Whistleblowing&nb...

  When Do Municipal Enterprises Fall Under Cybersecurity Requirements
A Practical Assessment Test for the Management of Municipal Enterprises on the Applicability of the Cybersecurity Act an...

  Regulatory Cybersecurity Obligations of Municipal Enterprises
Municipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...

  The Guide for Auditors of Information Security Management Systems Has Been Updated
At the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...

  A new standard has been published to support the privacy information management
The world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...

  An Updated Version of ISO/IEC 27005 – Information Security Risk Management Has Been Published
Protecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...

News
12
10.26
NATO Quality Assurance Standards Gain Attention in Defence Industry Investment
NATO quality assurance requirements are of practical importance to Bulgarian com...
25
09.26
European Cybersecurity Month 2026: The Human Factor in Focus
Today, the Court of Justice of the European Union in Luxembourg is hosting the o...
Accents
06
11.26
AQAP-2110: Beyond ISO 9001 Requirements
What additional requirements apply to suppliers in the defence industry? For ...
20
10.26
​Change Management in the Food Sector: When Is a New Risk Assessment Necessary?
Changing a supplier may seem like a routine commercial decision, while extending...

Implementation of management standards

CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.

The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.

See more
Partners