standards and regulatory requirements. Since its establishment, CONSEJO has worked with organizations across a wide range of industries, providing practical solutions tailored to each client’s specific needs and business objectives. Initi...
standards, practical experience and significant internal resources. Before starting the project, it is important to consider the following questions: Do you fully understand the applicable requirements of ISO 9001, ISO 14001, ISO 45001, ISO 2200...
standards performed by CONSEJO includes identification of the current business model, development and implementation of Management Systems (MS) and the Integrated Management System (IMS) based on International standards: ISO 9001 Quเlity m...
standards, schemes, and specifications to align them with the evolving business environment. All companies and organizations wishing to maintain the validity of their certification must revise and update their management system documentation within ...
standards requires continuously maintenance and development. The maintenance of management system allows for: Timely updating of the documentation with respect to changes in legislation, or internal organization of the company; Smoot...
standards such as ISO/IEC 27001, ISO/IEC 27002, NIST, TISAX and others. Main Objectives of the IT Audit: To determine whether IT services comply with good practices, applicable legal and regulatory requirements, and ...
standards. These reviews are called internal audits. CONSEJO offers, as a further service, performing internal audit of management systems (MS) according to ISO 9001, ISO 14001, ISO 20000-1, ISO/IEC 27001, ISO 28000, ISO&nbs...
standards and regulations. Our services include: Audit Preparation: Reviewing management system documentation (manual, policies, procedures, instructions, operational documents). Support during the Audit: During the audit itself, our...
standards, best practices, agreements with partners, and other relevant documents. Compliance Analysis: Conducting an in-depth review of processes and documentation to determine the level of compliance. Compilation of a Compliance Assessment Re...
standards and preparing companies in the defence industry for conformity assessment and certification. AQAP (Allied Quality Assurance Publications) are NATO publications that specify quality assurance requirements for contracts involving the supply ...
standard that specifies requirements for quality management systems. It provides a framework for managing processes and supports organizations in consistently providing products and services that meet customer requirements and applicable statutory an...
standard ISO 13009 established general requirements and recommendations for beach operators that offer tourist and visitor services. The standard provides guidance for both beach operators and users regarding the delivery sustainable management ...
standard that specifies requirements for quality management systems of organizations involved in one or more stages of the life cycle of medical devices. The standard is intended for organizations that need to demonstrate their ability to provide me...
standard emphasizes the identification and assessment of environmental aspects and the measurement of environmental performance, with the aim of helping organizations reduce the negative impacts of their activities and strengthen business resilience....
standard sets requirements and provides guidance for organizations that conducts or contracts security operations. It contains principles and requirements for a security operations management system (SOMS) and provides a framework for establishing, i...
standard for management system for services. It sets out the requirements for the service provider to plan, create, implement, operate, and then monitor, review, maintain and improve this system. Requirements include design, transition, provision and...
standard ISO 22000 defines the requirements for the food safety management system in the food chain, when an organization must demonstrate its ability to control food hazards to ensure that each food product is safe at the time of customer consu...
standard requirements are intended to allow for the continuity of business activities of the organization, to protect against and decrease the likelihood of incidents, to prepare for an appropriate reaction and recovery after destructive incidents ha...
standard that specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS). The standard provides a framework for systematically managing information security ris...
standard. What is ISO/IEC 27017:2015? ISO/IEC 27017 is an international standard jointly developed by ISO and IEC. It provides specific guidelines for managing information security within cloud environments. As part of the ISO/IEC 2700...
standard that provides guidelines for the protection of Personally Identifiable Information (PII) in the use of public cloud services. It is part of the ISO/IEC 27000 family of standards and is intended for cloud service providers that proc...
standard that provides guidelines for improving internet security as part of the broader cybersecurity framework. It addresses key risks and threats in the digital environment by offering effective mechanisms for protection against cyberattacks and g...
standards as a condition for inclusion in that supply chain. The standard increases the level of security of the entire supply chain of goods, vehicles and transport infrastructure from potential threats of theft, smuggling, terrorism. ISO 2800...
standard ISO 22716 provides guidelines for the production, control, storage and shipment of cosmetic products. The standard describes the basic principles for the application of Good Manufacturing Practice (GMP) in the cosmetics industry. Good...
standard that specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving an Anti-Bribery Management System (ABMS). It supports organizations in preventing, detecting and responding to bribery, a...
standards in agriculture and aquaculture. GLOBALG.A.P. is part of an internationally accepted set of agricultural standards and is recognized in more than 100 countries. It offers guidance on sustainable production practices, animal welfare and oc...
standard in the automotive sector. IATF 16949 is a joint development of the International Automotive Task Force – IATF, and the National Automotive Industry Associations – AIAG (US). This standard s supersedes and replaces ISO/TS 16949:2...
standard that provides principles, a framework, and guidelines for effective risk management applicable to all types of organizations—public and private—regardless of size, activities, or sector. The standard supports organizations in un...
standard... The main objective of ISO 39001 is to reduce the number of victims of road traffic crashes. It was developed in connection with the Decade of Action for Road Safety, proclaimed by the UN (2011‑2020) due to the global crisis in road ...
standards, containing more than 1300 documents of the National Institute of standards and Technology (NIST), USA. It was developed by experts in computer security and privacy at the US National Institute of standards and Technology (NIST) and is cons...
standards, training, incident investigation, route planning and tools. TAPA operates in three regions: Europe, the Middle East and Africa (EMEA), the Americas, Asia and the Pacific. TAPA EMEA offers 3 supply chain security standards: FSR &nd...
standards and include: • Food Safety • Consumer Products • Packaging and Packaging Materials • Storage and Distribution • Agents and Brokers • Retail • Ethical Trade and Responsible Sourcing • Gluten-Fr...
standard for food safety management systems; Prerequisite Programmes (PRPs) according to the ISO 22002-x series; additional requirements defined by Foundation FSSC. The combination of these elements creates a comprehensive management system...
standards applicable to the products and generally does not result in harmful impact on the environment or human health. According to the requirements of Regulation (EU) 333/2011, in order to ensure compliance with the criteria, it is appropriate to...
standard that defines the requirements for an occupational health and safety (OHS) management system. The standard gives guidance to any organization to improve its performance in preventing work-related injuries and illnesses caused. ISO 45001 is...
standard is applicable to mass-produced E/E systems on road vehicles, including their components and interfaces, for which development or modification has commenced since the document was published (August 2021). The standard does not make prescripti...
standard for artificial intelligence management systems. It provides organizations that develop, provide or use AI systems with a structured and auditable model for the responsible management of artificial intelligence — with risk controls, tra...
standard, applicable both independently and in integration with other management systems. What is ISO/IEC 27701:2025? ISO/IEC 27701:2025 specifies requirements and provides guidance for establishing, implementing, maintaining, and cont...
standard templates – Annex No. 7 to Article 31(2) of the Ordinance; Within four months from the entry into force of the Ordinance, all organisations falling within its scope must bring their activities into compliance with the netwo...
standards. However, standards such as: ISO/IEC 42001 — Artificial Intelligence Management System; ISO/IEC 27001 — Information Security Management System; ISO/IEC 27701 — Privacy Information Management System; and ISO 9001...
standards are used in the defence industry and supply chains for weapons, military equipment, components, software and related services. They provide a framework for managing and controlling quality in line with the specific requirements of defence c...
standard helps reducing environmental impact, caused by greenhouse gas and emissions. It intends to help lowering energy related expenses, by means of systematic energy management. ISO 50001 is applicable to all organizations regardless of their...
standard for evaluating the conformity of products and processes with respect to food safety and quality. It applies to suppliers at all stages of food processing after agricultural production. IFS Food belongs to the IFS group of standards (Internat...
standard with modular applications for different product groups, ranging from plant and livestock production to plant propagation materials and compound feed manufacturing. Feedback from nearly ten years of working with the standard – with mor...
standards of quality and safety in the distribution of medicinal products for human use. ...
standards have the same objective – ensuring good environmental management. In fact, requirements of ISO 14001 are an integral part of EMAS, and at the same time EMAS builds upon the International standard adding m...
standards such as ISO/IEC 27001 and PCI DSS have strict requirements regarding cybersecurity controls, SOC 2 does not prescribe a fixed set of controls; insteat, each organization designs and implements controls appropriate to its services, operating...
standards, supply chain security, the Prototype Protection module and other areas. More information about the key changes is available in our news article: “VDA Releases the VDA ISA2027 Catalogue.” ...
standards and covers environmental, social and governance issues. The set includes cross-sectoral and thematic standards. It is planned to publish standards specific to economic sectors and standards for small and medium-sized enterprises (SMEs), whi...
standards and business ethics can have a significant impact on compliance with human rights and is an important tool to help identify risks. SMETA (Sedex Members Ethical Trade Audit) is a widely recognized global social compliance scheme. SE...
standards and frameworks, including the Global Reporting Initiative (GRI), the principles of the United Nations Global Compact, International Labour Organization conventions and ISO 26000. EcoVadis assesses not only the existence of polici...
standard helps organisations to be aware of their social responsibilities while respecting the cultural, social, environmental and legal differences of their employees in the face of economic development and the social environment in which they opera...
standard for social accountability, developed in 1997 by Social Accountability International (SAI). It is based on the principles set forth in international conventions of the International Labour Organization (ILO), the Universal Declaration of Huma...
standards and best practices; including cybersecurity requirements in contractual arrangements with suppliers and subcontractors; managing risks related to critical ICT products and components, including vulnerability management and response; c...
standard for cyber security. What is Cyber Essentials? Launched in 2014 as a national initiative to strengthen the UK’s cyber resilience, Cyber Essentials provides a practical framework that enables any organisation – regardless...
standards, depending on the organization’s activities, sector and applicable requirements. ISO 9001 Quality management systems – Requirements specifies requirements for a quality management system and is applicable to organizations of al...
standards: ISO 14001 Environmental Management Systens – Requirements with Guidance for Use ISO 50001 Energy Management Systems – Requirements with Guidance for Use EMAS Eco-management and Audit Scheme ...
standard ISO 27001 sets the requirements for the Information Security management System (ISMS). ISO 27001 is applicable for all types of organizations: commercial, nonprofit, governmental and non-governmental. The advantages of implementing an In...
standards and best practices related to corporate sustainability, social responsibility, and environmental management. Directive (EU) 2022/2464 – Corporate Sustainability Reporting Directive (EU) 2022/2464 on corporate sustainability report...
standard ISO 45001 is voluntary and aims to help the organization to put the health and safety of employees among its main priorities and demonstrate commitment in these respect commitments to external stakeholders. Occupational health and sa...
standards. The development and implementation of a food safety system is based on the following international standards, laws and regulations of Bulgarian and European legislation: HACCP – General Principles of Food Hygiene CXC 1...
standards unifies the working process in the organization, reduces the production costs, increases the productivity, increases profits and eliminates inefficient business processes. In a broad sense, the management system consists of the str...
standards into a unified management framework. It enables an organisation to manage its processes, risks, resources and objectives in a coordinated manner while avoiding unnecessary duplication of activities and documentation. Rather than maintainin...
What additional requirements apply to suppliers in the defence industry? For companies with a quality management syst...
Changing a supplier may seem like a routine commercial decision, while extending a product's shelf life may be seen ...
NATO quality assurance requirements are of practical importance to Bulgarian companies that manufacture defence-related ...
Ahead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
The digitalization of business processes, the use of cloud services, remote working, and the growing volume of informati...
Tourism is one of the sectors in which digital technologies are transforming both the way services are delivered and cus...
On 16 September 2026, the International Organization for standardization (ISO) officially published ISO 9001:2026 &ndash...
On 16 September, the world marks the International Day for the Preservation of the Ozone Layer. In 2026, the offici...
The International Organization for standardization (ISO) will officially launch the new edition of the world’s mos...
The new edition of the world’s most widely used international standard for quality management systems – ISO ...
The German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of standards and Technology (NIS...
In April 2026, the International Organization for standardization published the new edition of ISO 14001 &ndas...
The new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
On 7 June, the world marks World Food Safety Day – an initiative of the World Health Organization and the Food and...
The International Organization for standardization (ISO) has published ISO 32212:2026 — a new international s...
After 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
FSSC 22000 released Version 7 of its food safety management system certification scheme on May 1, 20...
On 15 April 2026, ISO published the fourth edition of ISO 14001 — the world's most widely adopted in...
In April 2026, the official publication of the new version of the international standard ISO 14001:2026 is expected...
With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
The quality of tourism services provided at coastal and other beaches depends on multiple factors, including safety, inf...
Regulation (EU) 2024/2847 – better known as the Cyber Resilience Act (CRA) – is now part of the le...
In February 2026, the International Organization for standardization (ISO) published ISO 14092:2026, “Clima...
Today, organizations are facing increasing environmental challenges, including climate change, biodiversity loss, resour...
In recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
Artificial intelligence (AI) is increasingly recognised as a key driver of economic growth, digital transformation, and ...
In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
2025 established itself as a year of significant change in the fields of management standards, information security...
With the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
With the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
Stay ahead of requirements and protect your certification Revisions to standards are a natural part of continuous imp...
The International Organization for standardization (ISO) is in a decisive phase of revising the world’s most ...
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
On 14 October 2025, the International Organization for standardization (ISO) officially released the second edition of...
In 2025, the International Organization for standardization (ISO) published some of the most significant chang...
In the world of quality management, continual improvement is not merely a goal but a fundamental principle. The intern...
New Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
August 2025 – The International Organization for standardization (ISO) and the International Electrotechnic...
In August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
Double the Power for Your Information Security With over a decade of consultancy experience and dozens of successfu...
On July 30, 2025, the European Commission adopted a recommendation on the Voluntary Sustainability Reporting standard (V...
A new standard helps small and medium-sized enterprises meet sustainability requirements with reduced bureaucracy. ...
The Montreal Protocol on Substances that Deplete the Ozone Layer is one of the most significant international agreements...
ISO 14064 is a series of international standards developed by the International Organization for standardization (I...
Security, stability, and trust in institutions are fundamental to any democratic society. Among these institutions, poli...
We inform you that on May 14, 2025, IFS officially introduced the updated IFS ESG Compliance Check tool – part of ...
In the era of digital transformation, an increasing number of organizations are shifting their operations, data, and...
The International Organization for standardization (ISO) has officially published ISO 37001:2025 — Ant...
With the amendments to the Accounting Act of August 2024 (State Gazette, 72 of 2024, effective 6 July 2024), Bulg...
In today’s world, sustainable development and responsible resource use are key priorities for businesses and soc...
On 26 February 2025, the European Commission published the Omnibus I proposal (COM(2025)80), proposing a postponement of...
The draft amendments to the Bulgarian Cybersecurity Act aim to transpose Directive (EU) 2022/2555 (known as the NIS2 D...
In today’s business landscape, sustainable development and environmental responsibility are key drivers of long-...
In February 2025, the new standard ISO 59040:2025 – Circular Economy – Product Circularity Data Sheet was ...
The first of its kind International Summit on AI standards will take place on December 2-3, 2025, in Seoul. The initia...
With the development of quantum computers, traditional cryptographic algorithms such as RSA, ECC (Elliptic Curve Cryptog...
Whether it’s an attempt to breach the network or a complete shutdown of information systems, cyber-attacks are hig...
In today's world, the increasing plastic pollution is driving a growing demand for sustainable alternatives in pac...
Regulation (EU) 2022/2554, known as the Digital Operational Resilience Act (DORA), will take effect on January 17, ...
At a meeting of the Council of Ministers held on 03.07.2024, the government approved draft laws amending and supplementi...
What organisations should do about Amendment 1: Climate change changes to ISO 9001, ISO 14001, ISO 4500...
On 13 June 2024, the European Parliament and the Council adopted Directive (EU) 2024/1760 on corporate sustainability du...
In the context of growing global awareness of climate change and sustainability, the terms 'corporate responsibili...
Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...
Late last week, the International Organization for standardization (ISO) announced the introduction of amendments to a n...
The European Union's cybersecurity rules, introduced in 2016, have been updated by Directive (EU) 2022/2555 of ...
The recent 50th meeting of ISO TC 176/SC 2, held from 8-13 October, confirmed the decision for an early revision of the ...
The European Environmental Management and Audit Scheme (EMAS) is a voluntary EU scheme for companies and org...
On 3 October 2023, ISO published ISO 7101:2023 "Management of healthcare organisations - Quality management systems...
The first audits under IFS Food version 8 start on 1 October 2023. Version 7 audits can be conducted until the end of De...
Earlier this week, the Bulgarian standards Institute published BDS ISO/IEC 27035-1:2023 Information technology. Informat...
The automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
Commitments to achieve net zero emissions are increasing among companies, financial institutions, cities, regions and ot...
The WLA Security Control standard (WLA SCS) is an information security management framework developed by the World Lotte...
FSSC 22000 is an internationally recognized food safety audit and certification scheme for organizations in the food sup...
SMETA (SEDEX Members Ethical Trade Audit) is a widely recognized audit to assess the social and ethical performance of s...
WORLD METROLOGY DAY We celebrate World Metrology Day every year on May 20 to highlight the importance of metr...
ISO/SAE 21434:2021 is an international standard that addresses cyber security in the engineering of electrical and ...
CHANGES IN MANAGEMENT SYSTEMS In connection with the latest version of ISO/IEC 27001:2022, CONSEJO Ltd. offers...
The Council of the EU has agreed on its position on the European Commission's proposal for a Directive on corporat...
New developments in cyber security threats have pushed companies to look for new ways to protect themselves and their ...
In October 2022, the new edition of ISO/IEC 27005, Information security, cybersecurity and privacy protection — Gu...
ISO has published the new version of ISO/IEC 27001 under the title "Information security, cybersecurity and pr...
Taking into account the rapidly changing cybersecurity environment, ISOs are updating information security standards. Ea...
Traveling is a wonderful opportunity for rest, extreme experiences and new impressions. We present three ISO standards t...
PCI SSC released the latest update to the PCI Data Security standard (PCI DSS) in late March this year. PCI DSS (Pa...
On 15.03.2022 ISO published a new version of the standard ISO 28000:2022 Security and resilience — Security manage...
On 15 February 2022 the international organization ISO published the new version of ISO/IEC 27002 "Information...
New standard just published to help keep the hackers at bay As our cars get more connected, the risk of cybersecurity b...
On 30 June 2021, Regulation (EU) 2021/1119 of the European Parliament and of the Council was adopted, establishing a leg...
On 30 June 2021, the European Union adopted Regulation (EU) 2021/1119, known as the European Climate Law, establishing a...
At the end of 2019, the European Commission presented the European Green Deal – a comprehensive strategic framewor...
There are many standards that have an immediate application in dealing with and recovering from the pandemic: these are ...
In October 2020, IFS Food "Food Quality and Safety Audit standard" version 7.0 was published. The ne...
At the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
The world we live in today is more connected than ever, and digital technologies have their benefits and risks. Cybersec...
Protecting corporate information, whether commercially sensitive information or customers’ personal data, is incre...
You simply can’t be too careful when it comes to information security. Protecting personal records and commerciall...
At the beginning of 2015, the international standard ISO/IEC 27040:2015 Information technology — Security techniqu...
ISO food standards create confidence in the products we eat and drink ISO food standards provide benefits for all partic...
With the eyes of the world on the 2014 Olympic Games in Sochi, hundreds of ISO standards will make the games a safe and ...
ISO 9001, Quality Management Systems - Requirements, has reached the Committee Draft stage of the revision process. Like...
IFS would like to inform you about modifications in the IFS Food standard. These updates apply from 1st April 2013. T...
ISO today published ISO 9001:2008, the latest edition of the International standard used by organizations in 175 countri...
Certification to ISO 9001 (for quality management) and to ISO 14001 (for environmental management) increased in both cas...
A suite of new ISO standards offers the international community practical tools to address the global challenge of effec...
ISO has begun the development of ISO 21500, an international standard on project management. BSI British standards re...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































