personal data protection, ESG and sustainability, as well as support for EcoVadis assessments, NIS2 and DORA compliance, and compliance with other applicable European regulatory requirements. To date, the CONSEJO team has contributed to the succes...
personal data and on the free movement of such data. This Privacy Policy provides information on how CONSEJO Ltd. processes collected or received personal data about customers, contractors and users of the site www.consejo.bg. CONSEJO Ltd. 91...
personal data, and in the processing of such data using IT tools. The assessment criteria are both the requirements of REGULATION (EU) 2016/679 and the use of control mechanisms and good practices set out in ISO 27001 and ISO 2700...
personal data controller or a person external to the personal data controller charged with advisory functions in the field of personal data protection, supervision of compliance with Regulation (EU) 2016/679 and PDPA and staff awareness and...
personal data... Most successful cyberattacks do not begin with a breach of a firewall, but with a single email that someone has clicked on. A phishing simulation shows what could happen in your organisation before it actually happens. CONSEJO conducts controlled ph...
personal data protection in cloud environments. What ISO/IEC 27018:2025 Is ISO/IEC 27018:2025 provides additional controls and guidance specific to public cloud services, building upon general information security controls. The standar...
personal data, such as phishing, malware, and combined attacks that can lead to data breaches or identity theft. The standard emphasizes the importance of protecting personal information and online identities while encouraging international cooperati...
personal data, the AIMS is linked to GDPR processes, including the connection between the AI system impact assessment and the data protection impact assessment, or DPIA; an integrated ISO/IEC 27001 + ISO/IEC 42001 system is possible, with common pr...
personal data; • implement privacy policies, procedures, and controls. Purpose and Scope The main objective of ISO/IEC 27701:2025 is to provide organizations with a model for the systematic and transparent management of personal ...
personal data protection measures. With the entry into force, in May 2016, of Regulation (EU) 2016/679 of the European Parliament and of the Council – the General Data Protection Regulation (GDPR) – on the protection of natural persons w...
personal data; security of networks and information systems. The Law also covers: breaches affecting the financial interests of the European Union; breaches of the rules of the EU internal market, including competition and state aid rule...
On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
On 10 February 2026, on the occasion of Safer Internet Day, the European Commission presented the EU Action Pla...
10 February 2026 — Today marks Safer Internet Day – a global initiative that promotes the safer, more respon...
In recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
2025 established itself as a year of significant change in the fields of management standards, information security...
With the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
On 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
“GAME ON!” – Behavioral Change Towards Digital Threats October 2025 will once again be dedi...
In August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
August 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
In the State Gazette, Issue No. 38 of 2025, amendments and supplements to the Law on the Protection of Persons Reporting...
The European Union's cybersecurity rules, introduced in 2016, have been updated by Directive (EU) 2022/2555 of ...
The automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
The Law on protection of persons reporting or publicly disclosing information on breaches (the "Whistleblowing&nb...
A Practical Assessment Test for the Management of Municipal Enterprises on the Applicability of the Cybersecurity Act an...
Municipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
At the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
The world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
Protecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































