Your rating 0 from 0 votes
42 results found for "security" in pages:
About ussecurity, information security management, risk management, business continuity, personal data protection, ESG and sustainability, as well as support for EcoVadis assessments, NIS2 and DORA compliance, and compliance with other applicable European re...
Why to choose CONSEJO?security... Why Choose CONSEJO? Choosing the right consulting partner when implementing a management system has a direct impact on the quality of the final outcome. A well-managed implementation project involves much more than preparing documentation. It requ...
Privacy Noticesecurity... CONSEJO Ltd. is a controller of personally identifiable information (PII), according to the meaning of the REGULATION (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free moveme...
Implementation of management standardssecurity and Privacy Protection – Information security Management Systems – Requirements ISO 28000 security and resilience. security management systems. Requirements ISO 45001 Occupational health and safety management systems. Require...
Revising and improving implemented standardssecurity... REVISING AND IMPROVING IMPLEMENTED STANDARDS Standardization and compliance organizations periodically review and update the content of published standards, schemes, and specifications to align them with the evolving business environment. All c...
IT audit (Information systems audit)security within the organization with respect to data protection. This assessment is conducted through the implementation of best practices in information security management, in accordance with the requirements of the Cybersecurity Act, the Regulati...
Testing of security of Information Systemssecurity assessments to ensure their protection. SOCIAL ENGINEERING TESTS Social Engineering is a technique that relies on exploiting weaknesses in human nature, rather than hardware, software, or network vulnerabilities. CONSEJO off...
Implementation of the GDPR (Regulation 2016/679)security level; monitoring and response in case of data breach (leakage, change, deletion); international data transfer outside the EU; use of subcontractors in administration. ...
Internal audit on standards/schemes/practicessecurity... The implementation and subsequent successful certification of a Management System in your organization is not the last step on the way to improvement and continuous improvement. As far as the Management Systems are concerned, their maintenance depend...
Phishing Simulations for Employeessecurity Act and NIS2: The Directive requires basic cyber hygiene practices and cybersecurity training (Article 21), as well as training for management (Article 20). ISO/IEC 27001: Control A.6.3 requires information security awareness, education an...
ISO 14001 Environmental management systemssecurity... What is ISO 14001? ISO 14001 defines the requirements for an environmental management system (EMS), which can be integrated with other management requirements to help organizations achieve both their economic and environmental objectives. ...
ISO 18788 Management system for private security operationssecurity operations. It contains principles and requirements for a security operations management system (SOMS) and provides a framework for establishing, implementing, operating, maintaining and improving of these activities. ISO 18788...
ISO 20000-1 Service managementsecurity, the ISO/IEC 20000 standard contains a reference to the ISO/IEC 27001 standard. The optimal option for the most effective process management in the IT sector is the implementation of an integrated management system, according to the req...
ISO 22301 Business continuity management systemssecurity management", ISO/IEC 20000-1 "Information technology. Service management" and ISO 28000 "Specification for security management systems for the supply chain", and thus it assists the efficient functioning of...
ISO/IEC 27001 Cybersecurity and Privacy Protectionsecurity management system (ISMS). The standard provides a framework for systematically managing information security risks. The management system aims to preserve the confidentiality, integrity and availability of information by applying a risk m...
ISO/IEC 27017:2015 Code of practice for information security controlssecurity in cloud environments, the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) developed the ISO/IEC 27017:2015 standard. What is ISO/IEC 27017:2015? ISO/IEC&n...
ISO/IEC 27018 Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processorssecurity and personal data protection in cloud environments. What ISO/IEC 27018:2025 Is ISO/IEC 27018:2025 provides additional controls and guidance specific to public cloud services, building upon general information security controls...
ISO/IEC 27032 Guidelines for Internet securitysecurity as part of the broader cybersecurity framework. It addresses key risks and threats in the digital environment by offering effective mechanisms for protection against cyberattacks and guidance for risk management through both technical and no...
ISO 28000 security management systemssecurity of business processes, including supply. As a result, they face problems affecting the achievement of their business goals. Systematic approach to solving such problems can be offered by appropriate management systems. security management di...
ISO 39001 Road traffic safety management systemssecurity... The main objective of ISO 39001 is to reduce the number of victims of road traffic crashes. It was developed in connection with the Decade of Action for Road Safety, proclaimed by the UN (2011‑2020) due to the global crisis in road ...
NIST SP 800-53security and privacy at the US National Institute of Standards and Technology (NIST) and is considered the "gold" standard for information security, containing references to many other standards in this field. NIST SP 800-53 is designed ...
TAPAsecurity standards: FSR – Facility security Requirements TSR – Trucking security Requirements PSR – Parking security Requirements The TAPA EMEA Intelligence System (TIS) helps members manage risks and prevent losse...
ISO 21434 Road vehicles – Cybersecurity engineeringsecurity engineering specifies the engineering requirements for cybersecurity risk management in relation to the conception, product development, manufacture, operation, maintenance and decommissioning of electrical and electronic (E/E) systems in ro...
ISO/IEC 42001 Artificial intelligencesecurity, ISO/IEC 42001 defines how an organization manages the entire life cycle of its AI systems: from planning and development, or supplier selection, through deployment and monitoring, to decommissioning. Organizations can be certified against ...
ISO/IEC 27701 Information security, cybersecurity and privacy protectionsecurity, cybersecurity and privacy protection — Privacy information management systems — Requirements and guidance. It replaces the 2019 edition, which was a technical extension to ISO/IEC 27001 and ISO/IEC 27002. The ne...
GDPR (General Data Protection Regulation)security management. From 25 May 2018, controllers and processors are legally required to implement technical and organisational measures appropriate to the level of risk to the rights and freedoms of natural persons. Such measures may include: ...
Bulgarian Cybersecurity Actsecurity Act (promulgated in State Gazette No. 94 of 13 November 2018, as amended and supplemented, SG No. 17 of 13 February 2026) is the principal legislative act governing the protection of network and information syst...
Ordinance on the Minimum Requirements for Network and Information securitysecurity; In the event of a security incident, notification must be submitted within two hours after becoming aware of the incident; Full and detailed information regarding the incident must be submitted within five days; Incident notifica...
Law on the Protection of Persons Reporting Breachessecurity of networks and information systems. The Law also covers: breaches affecting the financial interests of the European Union; breaches of the rules of the EU internal market, including competition and state aid rules; breaches rel...
Regulation (EU) 2024/1689security; conformity assessment; and registration in the EU database, where applicable. 3. AI Systems Subject to Transparency Obligations Certain AI systems are subject to transparency obligations under Article 50 of the Regulation. These in...
GDP (Good Distribution Practice of medicinal products for human use)security... The Guide to Good Distribution Practice (GDP) medicinal products for human use is based on Article 84 and Article 85b, paragraph 3 of Directive 2001/83/EC of the European Parliament and of the Council of 5 November 2013....
SOC 2 (Service Organisation Control Type 2)security a top priority. A data breach can cost millions, not to mention the reputational damage and loss of customer trust. Cybersecurity requires defining frameworks – guiding principles and best practices that companies must follow to ensure...
TISAX (Trusted Information security Assessment Exchange)security assessment results within the automotive industry. TISAX was developed on the initiative of the German Association of the Automotive Industry (VDA) and is operated by the ENX Association. Its primary purpose is to provide a common approach ...
SMETA (Sedex Members Ethical Trade Audit)security... SMETA Ethical audits Auditing the supply chain for compliance with labor and social standards and business ethics can have a significant impact on compliance with human rights and is an important tool to help identify risks. SMETA (...
NIS2 (DIRECTIVE (EU) 2022/2555)security across the Union is a legislative act aimed at achieving a high common level of cybersecurity throughout the European Union. The Directive, commonly referred to as NIS2, replaced Directive (EU) 2016/1148 (NIS1). It entered into force on 16 ...
DORA (Regulation (EU) 2022/2554)security: - Implement a robust cybersecurity strategy to protect against cyber threats. - Conduct resilience testing, including advanced testing for significant entities, to evaluate the organization's ability to effectively respond to and reco...
CYBER ESSENTIALSsecurity certification scheme, managed by the National Cyber security Centre (NCSC) and the Department for Science, Innovation and Technology (DSIT). Its purpose is to help organisations of all sizes protect themselves against the most common cyber ...
Cybersecurity, Information securitysecurity. This information can be company property (know-how, personal information, etc.) or customer property. International standard ISO 27001 sets the requirements for the Information security management System (ISMS). ISO 27001 is applicable ...
Health & Safetysecurity standards: ISO 18788 Management Systems for Private security Operations. Requirement with Guidance for Use ISO 28000 security and Resilience. Secirity Management Systems. Requirements ISO 45001 Ocupational Health and Safety Management Sys...
What is Management Systemsecurity of the offered product and service, regardless of the quantity and term of implementation, as well as compliance with the applicable legal requirements. The management system stimulates the continuous increase of customer satisfaction. &nbs...
Integrated Management Systemsecurity management – ISO/IEC 20000-1 and ISO/IEC 27001; Information security and business continuity management – ISO/IEC 27001 and ISO 22301; Quality, security, and business continuity management – ISO 9001, ISO 28000, a...
83 results found for "security" in news:
NIS2 Registration in Bulgaria: Who Is Required to Register and What Are the Requirements?The transposition of Directive (EU) 2022/2555 (NIS2) into Bulgarian law expands the range of organisations subject to cy...
European Cybersecurity Month 2026: Are Employees Prepared for Cyber Threats?Every October, Europe marks European Cybersecurity Month (ECSM), an annual European initiative to raise cybersecurity aw...
The Human Factor in Information security: Why Technology Is Not EnoughAhead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
European Cybersecurity Month 2026: The Human Factor in FocusToday, the Court of Justice of the European Union in Luxembourg is hosting the official kick-off event for European Cybe...
Information security and Cybersecurity – Is There a Difference?The digitalization of business processes, the use of cloud services, remote working, and the growing volume of informati...
Artificial Intelligence and Sustainable Tourism: How Technology Is Transforming the
Management
and Quality of Tourism ServicesTourism is one of the sectors in which digital technologies are transforming both the way services are delivered and cus...
European Commission Presents the European Technological Sovereignty PackageThe European Commission has presented the European Technological Sovereignty Package, one of the most significant initia...
New EU AI Act Requirements Take Effect TodayAs of today, 2 August 2026, Regulation (EU) 2024/1689 on Artificial Intelligence (the EU AI Act) reaches another key imp...
VDA Releases the VDA ISA2027 CatalogueThe German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
Regulation (EU) 2024/1689 enters a new phase on 2 August 2026On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
NIST Cybersecurity Framework 2.0 (NIST CSF 2.0)The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
ISO 19011:2026: updated guidance for auditing management systemsThe new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
7 June – World Food Safety DayOn 7 June, the world marks World Food Safety Day – an initiative of the World Health Organization and the Food and...
Ten Days Until Sanctions Under the Cybersecurity Act Apply in FullAfter 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
FSSC 22000 Releases Version 7FSSC 22000 released Version 7 of its food safety management system certification scheme on May 1, 20...
How ISO/IEC 27001 Supports Compliance with the Bulgarian Cybersecurity Act (NIS2)With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
Cyber Resilience Act and the New Model of Product Liability in the EURegulation (EU) 2024/2847 – better known as the Cyber Resilience Act (CRA) – is now part of the le...
Amendments to the Cybersecurity ActWith the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
Action Plan Against CyberbullyingOn 10 February 2026, on the occasion of Safer Internet Day, the European Commission presented the EU Action Pla...
Safer Internet Day 2026 – Together for a Safer Online World10 February 2026 — Today marks Safer Internet Day – a global initiative that promotes the safer, more respon...
Parliament Adopted at Second Reading Amendments to the Cybersecurity Act in Connection with
NIS 2After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
Why ISO Standards Are Becoming Crucial in Public ProcurementIn recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
AI and Energy: Europe’s New Strategic ChallengeArtificial intelligence (AI) is increasingly recognised as a key driver of economic growth, digital transformation, and ...
How to Choose the Right Consulting Organization?In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
Key Changes in International Standards and Regulatory Requirements in 20252025 established itself as a year of significant change in the fields of management standards, information security...
ISO/IEC 27071: security and Trust Between Devices and ServicesWith the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
ISO/IEC 42005:2025 – a standard for assessing the impact of artificial intelligence systemsWith the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
How to Prepare for the Transition to a New Version of a Standard?Stay ahead of requirements and protect your certification Revisions to standards are a natural part of continuous imp...
ISO/DIS 9001:2025 – Voting Deadline ApproachingThe International Organization for Standardization (ISO) is in a decisive phase of revising the world’s most ...
ISO/IEC 27701:2025 — A New Era in Privacy ManagementISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
ISO/IEC 27701:2025 – The New Standard for Privacy, AI and Cloud TechnologiesOn 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
ISO 22002-1:2025 and ISO 22002-100:2025 – Important Changes in Food Safety Prerequisite
ProgrammesIn 2025, the International Organization for Standardization (ISO) published some of the most significant chang...
European Cybersecurity Month 2025“GAME ON!” – Behavioral Change Towards Digital Threats October 2025 will once again be dedi...
ISO 54002:2025 – The New Quality Management Standard for Police OrganizationsNew Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
ISO/IEC 27018:2025 – Enhanced Protection of Personal Data in the CloudAugust 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
ISO/IEC 27018:2025: Updated Guidelines for PII Protection in Cloud EnvironmentsIn August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
NEW: Network and Information security Specialist as a ServiceDouble the Power for Your Information security With over a decade of consultancy experience and dozens of successfu...
ISO/FDIS 54002:2025 – Guidelines for Quality Management in Police Organizationssecurity, stability, and trust in institutions are fundamental to any democratic society. Among these institutions, poli...
Amendments to the Law on the Protection of Persons Reporting BreachesIn the State Gazette, Issue No. 38 of 2025, amendments and supplements to the Law on the Protection of Persons Reporting...
ISO/IEC 27017 – Information security Standard for Cloud ServicesIn the era of digital transformation, an increasing number of organizations are shifting their operations, data, and...
How to Protect Your Data in the Digital AgeIn the digital age, cybersecurity is a key element for the success of any organization. With the increasing threat of ...
Dimitar Saparevski Participates in Cybersecurity and Artificial Intelligence ConferenceOn March 18, 2025, the second edition of the conference "ALSO Leading the way: New Era of AI and Cybersecurity"...
If Cybercrime Were a Country, It Would Rank Third in GDP in 2024In 2024, the global economy saw a growth of 3.2% compared to the previous year, reaching approximately 105 t...
The Cybersecurity Bill Advances Towards Final AdoptionThe draft amendments to the Bulgarian Cybersecurity Act aim to transpose Directive (EU) 2022/2555 (known as the NIS2 D...
International Summit on AI Standards – December 2025The first of its kind International Summit on AI Standards will take place on December 2-3, 2025, in Seoul. The initia...
Post-Quantum Cryptography: The Future of CybersecurityWith the development of quantum computers, traditional cryptographic algorithms such as RSA, ECC (Elliptic Curve Cryptog...
Draft Bill Amending the Cybersecurity Act Submitted in Connection with NIS2A draft bill to amend and supplement the Bulgarian Cybersecurity Act has been submitted to the Bulgarian National A...
Regulation (EU) 2024/2847 – Cyber Resilience ActRegulation (EU) 2024/2847 of the European Parliament and of the Council, better known as the Cyber Resilience Act (CRA),...
Impact Analysis of Cyber AttacksWhether it’s an attempt to breach the network or a complete shutdown of information systems, cyber-attacks are hig...
DORA - New Cybersecurity Requirements in the EU Financial SectorRegulation (EU) 2022/2554, known as the Digital Operational Resilience Act (DORA), will take effect on January 17, ...
Regulation (EU) 2024/1689 on artificial intelligence rulesRegulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI) sets out a framework for the deve...
How NIS 2 relates to ISO/IEC 27001Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
What is ISMS and why do you need it?Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information security ...
Amendment 1: Climate action changesLate last week, the International Organization for Standardization (ISO) announced the introduction of amendments to a n...
Differences between NIS and NIS 2 directivesThe European Union's cybersecurity rules, introduced in 2016, have been updated by Directive (EU) 2022/2555 of ...
ISO/IEC 27035-1:2023 AND ISO/IEC 27035-2:2023 WITH NEW VERSIONSEarlier this week, the Bulgarian Standards Institute published BDS ISO/IEC 27035-1:2023 Information technology. Informat...
Standards for the protection of automotive securityThe automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
WLA security Control Standard - security controls in the lottery industryThe WLA security Control Standard (WLA SCS) is an information security management framework developed by the World Lotte...
Good Distribution Practice of Medicinal Products for Human UseGood distribution practice (GDP) is a quality system for warehouses and distribution centres that handle medicines. GDP ...
ISO/SAE 21434:2021 Road vehicles – Cybersecurity engineeringISO/SAE 21434:2021 is an international standard that addresses cyber security in the engineering of electrical and ...
Transition to the Requirements of ISO/IEC 27001:2022CHANGES IN MANAGEMENT SYSTEMS In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
Threat Intelligence: Responding to the New Information security ThreatsNew developments in cyber security threats have pushed companies to look for new ways to protect themselves and their ...
When Do Municipal Enterprises Fall Under Cybersecurity RequirementsA Practical Assessment Test for the Management of Municipal Enterprises on the Applicability of the Cybersecurity Act an...
Regulatory Cybersecurity Obligations of Municipal EnterprisesMunicipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
ISO/IEC 27005:2022 – What Has Changed in Information security Risk ManagementIn October 2022, the new edition of ISO/IEC 27005, Information security, cybersecurity and privacy protection — Gu...
ISÎ/IÅC 27001:2022 has been publishedISO has published the new version of ISO/IEC 27001 under the title "Information security, cybersecurity and pr...
Financial Assistance to Improve Information and Communication Technologies in Small and
Medium-sized EnterprisesEU is giving 30 600 000 of financial assistance in support of procedure BG-RRP-3.005 “Improving Information and ...
Upcoming version of ISO 27001: new controls from 2022Taking into account the rapidly changing cybersecurity environment, ISOs are updating information security standards. Ea...
PCI DSS version 4.0PCI SSC released the latest update to the PCI Data security Standard (PCI DSS) in late March this year. PCI DSS (Pa...
ISO 28000 - New VersionOn 15.03.2022 ISO published a new version of the standard ISO 28000:2022 security and resilience — security manage...
Cybersecurity Act Amended(promulgated in the State Gazette, No. 25 of 29 March 2022) In State Gazette, No. 25 of 29 March 2022, an amendment t...
Amendments to the Cybersecurity Act – Scope and Key AspectsIn State Gazette, No. 25 of 29 March 2022, amendments to the Cybersecurity Act were promulgated. These amendments intr...
New version of ISO/IEC 27002On 15 February 2022 the international organization ISO published the new version of ISO/IEC 27002 "Information...
Cybersecurity in CarsNew standard just published to help keep the hackers at bay As our cars get more connected, the risk of cybersecurity b...
Upcoming Standards for COVID-19There are many standards that have an immediate application in dealing with and recovering from the pandemic: these are ...
TISAX - Mechanism for Assessing the security and Reliability of Information in the Automotive
IndustryTISAX is an assessment and exchange mechanism for the information security of enterprises in the automotive supply chain...
The Guide for Auditors of Information security Management Systems Has Been UpdatedAt the end of January 2020, the international standard for ISMS audit guidelines was updated. security of company-s...
A new standard has been published to support the privacy information managementThe world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
An Updated Version of ISO/IEC 27005 – Information security Risk Management Has Been
PublishedProtecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
How to measure the effectiveness of Information security?You simply can’t be too careful when it comes to information security. Protecting personal records and commerciall...
ISO/IEC 27040:2015 Information technology - security techniques - Storage securityAt the beginning of 2015, the international standard ISO/IEC 27040:2015 Information technology — security techniqu...
ISO 22301:2012 Societal security - Business continuity management systemsISO 22301 specifies requirements to plan, establish, implement, operate, monitor, review, maintain and continually impro...
Latest issue of The ISO Survey shows 16% rise in ISO 9001 and ISO 14001 certificationsCertification to ISO 9001 (for quality management) and to ISO 14001 (for environmental management) increased in both cas...
News
12
10.26
NATO Quality Assurance Standards Gain Attention in Defence Industry Investment
NATO quality assurance requirements are of practical importance to Bulgarian com...
25
09.26
European Cybersecurity Month 2026: The Human Factor in Focus
Today, the Court of Justice of the European Union in Luxembourg is hosting the o...
Accents
06
11.26
AQAP-2110: Beyond ISO 9001 Requirements
What additional requirements apply to suppliers in the defence industry?
For ...
20
10.26
Change Management in the Food Sector: When Is a New Risk Assessment Necessary?
Changing a supplier may seem like a routine commercial decision, while extending...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.
Partners
