Your rating 0 from 0 votes
24 results found for "risk management" in pages:
About usrisk management, business continuity, personal data protection, ESG and sustainability, as well as support for EcoVadis assessments, NIS2 and DORA compliance, and compliance with other applicable European regulatory requirements. To date, the CONS...
IT audit (Information systems audit)risk management, ensuring compliance with established information security frameworks. Stages of IT Audit: 1. Planning the Audit Preparing an audit plan and defining the audit team, including roles and responsibilities. Conducting a ...
Implementation of AQAPrisk management processes. Configuration and change management arrangements. Supplier evaluation and control procedures. Identification and traceability arrangements. Product control, inspection and testing arrangements. Procedures for mana...
ISO 13009 Requirements and recommendations for beach operationrisk management procedures are intended to be used. Performing a risk assessment is an easy way to support the management and safety of a beach. It also determines the type of beach (high activity beach or low activity beach). Each beach is unique an...
ISO 13485 Medical devices Requirements for regulatory purposesrisk management and the ability of organizations to provide medical devices that meet applicable safety and performance requirements. A quality management system according to ISO 13485 complements the technical requirements for medical devices ...
ISO 22000 Food safety management systemsrisk management in food safety processes; • assesses customer requirements and to proves compliance with those pre-agreed with customers' requirements related to food safety, in order to increase customer satisfaction; • communicate e...
ISO/IEC 27001 Cybersecurity and Privacy Protectionrisk management process and to give confidence to interested parties that risks are adequately managed. ISO/IEC 27001 is not limited to information technology and technical security measures. The management system integrates information security i...
ISO/IEC 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processorsrisk management related to PII protection in cloud environments. How CONSEJO Can Help CONSEJO supports organizations in implementing and applying international standards for information security and personal data protection. Our team offe...
ISO/IEC 27032 Guidelines for Internet securityrisk management through both technical and non-technical control mechanisms. The standard is designed for organizations that use the internet for business activities such as e-commerce, cloud services, and other related services. It complements exis...
ISO 31000 risk management. Guidelinesrisk management applicable to all types of organizations—public and private—regardless of size, activities, or sector. The standard supports organizations in understanding and managing uncertainty, making informed decisions, reducing the...
FSSC 22000risk management, traceability, and regulatory compliance. In this context, FSSC 22000 has established itself as one of the most recognized food safety certification schemes worldwide. What is FSSC 22000 FSSC 22000 (Food Safety System Certif...
ISO 21434 Road vehicles Cybersecurity engineeringrisk management in relation to the conception, product development, manufacture, operation, maintenance and decommissioning of electrical and electronic (E/E) systems in road vehicles, including their components and interfaces. A framework is defi...
ISO/IEC 42001 Artificial intelligencerisk management, data quality and data governance, human oversight, transparency, technical documentation, post-deployment monitoring and incident reporting. A certified AIMS can help demonstrate to regulators, customers and partners a systematic, tr...
Bulgarian Cybersecurity Actrisk management, and coordination among competent authorities in the Republic of Bulgaria. Initially, the Act transposed Directive (EU) 2016/1148 (NIS). With the substantial amendments adopted in 2026, the requirements of Directive (EU) 20...
Ordinance on the Minimum Requirements for Network and Information Securityrisk management (Article 7); Rules on information asset management (Article 8); Incident management; Types of and options for protection of information and network infrastructure (Section II); Access management; Controls, mon...
Regulation (EU) 2024/1689risk management; data governance and data quality; technical documentation; record-keeping and traceability; transparency and provision of information; human oversight; accuracy, robustness and cybersecurity; conformity assessment; and ...
AQAPrisk management, configuration management, supplier control and interaction with the Acquirer. ISO 9001 certification does not automatically demonstrate conformity with AQAP-2110. Which Organisations Are AQAP Standards Applicable To? AQAP standa...
GDP (Good Distribution Practice of medicinal products for human use)risk management principles in relation to their activities (Article 80(h) of Directive 2001/83/EC). Chapter 2 STAFF To carry out the distribution activity, a sufficient number of competent personnel is needed to carry out all the tasks for whi...
TISAX (Trusted Information Security Assessment Exchange)risk management information classification and protection access management cryptographic controls physical security IT infrastructure security supplier management incident management business continuity data protection Prototype ...
ESG Standardsrisk management and impact opportunities, and climate change-related indicators and targets. Sustainability information can influence stakeholder decisions. Companies should identify their two main stakeholder groups: affected stakeholders: in...
NIS2 (DIRECTIVE (EU) 2022/2555)risk management measures and reporting obligations across all sectors and activities falling within its scope. What is new? New sectors added Directive (EU) 2022/2555 expands its scope by introducing new sectors based on their importance...
DORA (Regulation (EU) 2022/2554)risk management framework for Information and Communication Technologies (ICT). - Identify, categorize, and assess ICT-related risks. - Implement protective and preventive measures to mitigate identified risks. - Regularly review and test the...
Qualityrisk management... In today’s dynamic business environment, where technologies and innovations are developing rapidly, maintaining a high level of quality is an important factor in the success of any organization, regardless of its size. Quality helps build trust...
Integrated Management Systemrisk management – consideration of the interrelationships between different aspects of operations and implementation of coordinated measures; Improved coordination between departments – clear allocation of responsibilities and better co...
47 results found for "risk management" in news:
AQAP-2110: Beyond ISO 9001 RequirementsWhat additional requirements apply to suppliers in the defence industry? For companies with a quality management syst...
NATO Quality Assurance Standards Gain Attention in Defence Industry InvestmentNATO quality assurance requirements are of practical importance to Bulgarian companies that manufacture defence-related ...
NIS2 Registration in Bulgaria: Who Is Required to Register and What Are the Requirements?The transposition of Directive (EU) 2022/2555 (NIS2) into Bulgarian law expands the range of organisations subject to cy...
European Cybersecurity Month 2026: Are Employees Prepared for Cyber Threats?Every October, Europe marks European Cybersecurity Month (ECSM), an annual European initiative to raise cybersecurity aw...
The Human Factor in Information Security: Why Technology Is Not EnoughAhead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
Artificial Intelligence and Sustainable Tourism: How Technology Is Transforming the
Management
and Quality of Tourism ServicesTourism is one of the sectors in which digital technologies are transforming both the way services are delivered and cus...
Regulation (EU) 2024/1689 enters a new phase on 2 August 2026On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
NIST Cybersecurity Framework 2.0 (NIST CSF 2.0)The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
Ten Days Until Sanctions Under the Cybersecurity Act Apply in FullAfter 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
FSSC 22000 Releases Version 7FSSC 22000 released Version 7 of its food safety management system certification scheme on May 1, 20...
ISO 14001:2026 has been publishedOn 15 April 2026, ISO published the fourth edition of ISO 14001 — the world's most widely adopted in...
ISO 14001:2026 What to Expect from the New VersionIn April 2026, the official publication of the new version of the international standard ISO 14001:2026 is expected...
How ISO/IEC 27001 Supports Compliance with the Bulgarian Cybersecurity Act (NIS2)With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
ISO 13009:2015 An International Standard for Beach Operation and ManagementThe quality of tourism services provided at coastal and other beaches depends on multiple factors, including safety, inf...
Cyber Resilience Act and the New Model of Product Liability in the EURegulation (EU) 2024/2847 – better known as the Cyber Resilience Act (CRA) – is now part of the le...
ISO 14092:2026 Standard for Climate Change Adaptation PlanningIn February 2026, the International Organization for Standardization (ISO) published ISO 14092:2026, “Clima...
Amendments to the Cybersecurity ActWith the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
Parliament Adopted at Second Reading Amendments to the Cybersecurity Act in Connection with
NIS 2After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
Why ISO Standards Are Becoming Crucial in Public ProcurementIn recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
How to Choose the Right Consulting Organization?In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
Key Changes in International Standards and Regulatory Requirements in 20252025 established itself as a year of significant change in the fields of management standards, information security...
ISO/IEC 42005:2025 a standard for assessing the impact of artificial intelligence systemsWith the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
ISO/IEC 27701:2025 A New Era in Privacy ManagementISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
What to Expect from the Revision of ISO 9001:2026In the world of quality management, continual improvement is not merely a goal but a fundamental principle. The intern...
ISO 54002:2025 The New Quality Management Standard for Police OrganizationsNew Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
ISO/FDIS 54002:2025 Guidelines for Quality Management in Police OrganizationsSecurity, stability, and trust in institutions are fundamental to any democratic society. Among these institutions, poli...
IFS ESG Compliance CheckWe inform you that on May 14, 2025, IFS officially introduced the updated IFS ESG Compliance Check tool – part of ...
If Cybercrime Were a Country, It Would Rank Third in GDP in 2024In 2024, the global economy saw a growth of 3.2% compared to the previous year, reaching approximately 105 t...
EU Proposes Postponement of Certain CSRD Reporting Requirements and CSDDD DeadlinesOn 26 February 2025, the European Commission published the Omnibus I proposal (COM(2025)80), proposing a postponement of...
The Cybersecurity Bill Advances Towards Final AdoptionThe draft amendments to the Bulgarian Cybersecurity Act aim to transpose Directive (EU) 2022/2555 (known as the NIS2 D...
Why Are Environmental Standards Important?In today’s business landscape, sustainable development and environmental responsibility are key drivers of long-...
Draft Bill Amending the Cybersecurity Act Submitted in Connection with NIS2A draft bill to amend and supplement the Bulgarian Cybersecurity Act has been submitted to the Bulgarian National A...
Regulation (EU) 2024/2847 Cyber Resilience ActRegulation (EU) 2024/2847 of the European Parliament and of the Council, better known as the Cyber Resilience Act (CRA),...
DORA - New Cybersecurity Requirements in the EU Financial SectorRegulation (EU) 2022/2554, known as the Digital Operational Resilience Act (DORA), will take effect on January 17, ...
Regulation (EU) 2024/1689 on artificial intelligence rulesRegulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI) sets out a framework for the deve...
Integration of climate actions into ISO standardsWhat organisations should do about Amendment 1: Climate change changes to ISO 9001, ISO 14001, ISO 4500...
Directive (EU) 2024/1760 (CSDDD/CS3D) Sustainability Due Diligence and the New Obligations
for CompaniesOn 13 June 2024, the European Parliament and the Council adopted Directive (EU) 2024/1760 on corporate sustainability du...
What is ISMS and why do you need it?Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...
IWA 42:2022 International Guidelines for Achieving Net Zero EmissionsCommitments to achieve net zero emissions are increasing among companies, financial institutions, cities, regions and ot...
WLA Security Control Standard - security controls in the lottery industryThe WLA Security Control Standard (WLA SCS) is an information security management framework developed by the World Lotte...
Good Distribution Practice of Medicinal Products for Human UseGood distribution practice (GDP) is a quality system for warehouses and distribution centres that handle medicines. GDP ...
Regulatory Cybersecurity Obligations of Municipal EnterprisesMunicipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
ISO/IEC 27005:2022 What Has Changed in Information Security risk managementIn October 2022, the new edition of ISO/IEC 27005, Information security, cybersecurity and privacy protection — Gu...
Amendments to the Cybersecurity Act Scope and Key AspectsIn State Gazette, No. 25 of 29 March 2022, amendments to the Cybersecurity Act were promulgated. These amendments intr...
New version of ISO/IEC 27002On 15 February 2022 the international organization ISO published the new version of ISO/IEC 27002 "Information...
The European Green Deal A Strategic Shift with Direct Implications for BusinessAt the end of 2019, the European Commission presented the European Green Deal – a comprehensive strategic framewor...
An Updated Version of ISO/IEC 27005 Information Security risk management Has Been
PublishedProtecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
News
12
10.26
NATO Quality Assurance Standards Gain Attention in Defence Industry Investment
NATO quality assurance requirements are of practical importance to Bulgarian com...
25
09.26
European Cybersecurity Month 2026: The Human Factor in Focus
Today, the Court of Justice of the European Union in Luxembourg is hosting the o...
Accents
06
11.26
AQAP-2110: Beyond ISO 9001 Requirements
What additional requirements apply to suppliers in the defence industry?
For ...
20
10.26
Change Management in the Food Sector: When Is a New Risk Assessment Necessary?
Changing a supplier may seem like a routine commercial decision, while extending...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
Partners
