standards and regulatory requirements. Since its establishment, CONSEJO has worked with organizations across a wide range of industries, providing practical solutions tailored to each client’s specific needs and business objectives. Initi...
standards, practical experience and significant internal resources. Before starting the project, it is important to consider the following questions: Do you fully understand the applicable requirements of ISO 9001, ISO 14001, ISO 45001, ISO 2200...
standards performed by CONSEJO includes identification of the current business model, development and implementation of Management Systems (MS) and the Integrated Management System (IMS) based on International standards: ISO 9001 Quàlity m...
standards, schemes, and specifications to align them with the evolving business environment. All companies and organizations wishing to maintain the validity of their certification must revise and update their management system documentation within ...
standards requires continuously maintenance and development. The maintenance of management system allows for: Timely updating of the documentation with respect to changes in legislation, or internal organization of the company; Smoot...
standards such as ISO/IEC 27001, ISO/IEC 27002, NIST, TISAX and others. Main Objectives of the IT Audit: To determine whether IT services comply with good practices, applicable legal and regulatory requirements, and ...
standards. These reviews are called internal audits. CONSEJO offers, as a further service, performing internal audit of management systems (MS) according to ISO 9001, ISO 14001, ISO 20000-1, ISO/IEC 27001, ISO 28000, ISO&nbs...
standards and regulations. Our services include: Audit Preparation: Reviewing management system documentation (manual, policies, procedures, instructions, operational documents). Support during the Audit: During the audit itself, our...
standards, best practices, agreements with partners, and other relevant documents. Compliance Analysis: Conducting an in-depth review of processes and documentation to determine the level of compliance. Compilation of a Compliance Assessment Re...
standards and preparing companies in the defence industry for conformity assessment and certification. AQAP (Allied Quality Assurance Publications) are NATO publications that specify quality assurance requirements for contracts involving the supply ...
standards ISO 9001:2026 Published – What Is Changing and How Organizations Can Prepare for the Transition ...
standards... The international standard ISO 13009 established general requirements and recommendations for beach operators that offer tourist and visitor services. The standard provides guidance for both beach operators and users regarding the delive...
standards through its specific requirements for the medical device sector, including regulatory compliance and ensuring the safety and performance of products. Risk Management Risk management is a key element in the application of ISO ...
standards... What is ISO 14001? ISO 14001 defines the requirements for an environmental management system (EMS), which can be integrated with other management requirements to help organizations achieve both their economic and environmental objectives. ...
standards necessary to ensure that human rights and fundamental freedoms are respected in order to protect life and property. They manage the use of tactics, techniques, procedures and equipment, including weapons in a manageable risk environment. &...
standards for management systems – ISO 9001 and ISO 14001 – and includes the Plan – Do – Check – Act cycle (PDCA or Deming cycle) and the requirement for continuous improvement. According to the require...
standards such as ISO 9001, ISO 14001, ISO 45001, IFS Food, BRCGS and others. ...
standards. This model allows the BCMS to be integrated with other standards for management systems, for example with: ISO 9001 "Quality management systems", ISO 14001 "Environmental management systems", ISO/IEC 2700...
standards and with ISO/IEC 27002:2022. Who is ISO/IEC 27001 applicable to? ISO/IEC 27001 is applicable to organizations of all types and sizes, regardless of the nature of their activities. The standard can be applied by IT companies...
standards such as the GDPR. Key Features of ISO/IEC 27017 ISO/IEC 27017 offers specialized guidance and controls for managing cloud security. Its key features include: 1. Additional Controls and Guidance for Cloud Services The...
standards and is intended for cloud service providers that process PII on behalf of their customers and act as PII processors. The current 2025 edition (Edition 3) replaces ISO/IEC 27018:2019 and is aligned with ISO/IEC 27002:2022, as...
standards, such as ISO/IEC 27001 and ISO/IEC 27002. Key Aspects of ISO/IEC 27032 Interconnection Between Cybersecurity and Internet Security: The standard examines the relationship between cybersecurity, web security, network security, and Int...
standards as a condition for inclusion in that supply chain. The standard increases the level of security of the entire supply chain of goods, vehicles and transport infrastructure from potential threats of theft, smuggling, terrorism. ISO 2800...
standards through the application of the latest ISO Harmonized Structure (HS), thereby facilitating the integration of multiple management systems. Scope and applicability ISO 37001 is applicable to any organization, regardless of its ...
standards in agriculture and aquaculture. GLOBALG.A.P. is part of an internationally accepted set of agricultural standards and is recognized in more than 100 countries. It offers guidance on sustainable production practices, animal welfare and oc...
standards, IATF 16949 does not contain ISO 9001:2015 texts. The document contains only the additional requirements specific to the automotive industry. I ATF 16949 integrates common industry practices that were previously customer specific require...
standards, without replacing them. It is a guidance standard and does not include requirements for certification. Risk Management in Accordance with ISO 31000 Risk management in accordance with ISO 31000 is not a standalone activity but an ...
standards, containing more than 1300 documents of the National Institute of standards and Technology (NIST), USA. It was developed by experts in computer security and privacy at the US National Institute of standards and Technology (NIST) and is cons...
standards, training, incident investigation, route planning and tools. TAPA operates in three regions: Europe, the Middle East and Africa (EMEA), the Americas, Asia and the Pacific. TAPA EMEA offers 3 supply chain security standards: FSR &nd...
standards and include: • Food Safety • Consumer Products • Packaging and Packaging Materials • Storage and Distribution • Agents and Brokers • Retail • Ethical Trade and Responsible Sourcing • Gluten-Fr...
standards. Additional FSSC Requirements Foundation FSSC introduces additional requirements related to: food defense; food fraud prevention; food safety culture; environmental monitoring programmes; supplier management; manage...
standards applicable to the products and generally does not result in harmful impact on the environment or human health. According to the requirements of Regulation (EU) 333/2011, in order to ensure compliance with the criteria, it is appropriate to...
standards, such as ISO 9001 and ISO 14001. Other international standards, national standards have also been taken into account in developing the standard, and International Labour standards and Conventions. Implementation of ISO 45001 is easy...
standards share a common structure and logic and are designed to work together: context, management of documented information, internal audits and management review are built upon, not duplicated; the risk assessment methodology is extended wit...
standards (e.g. ISO 9001, ISO/IEC 27001 and others). Expanded scope of controls — new controls and guidance added, including those related to: consideration and management of risks associated with climate change; cloud serv...
standards and best practices The Ordinance is aligned with: The ISO/IEC 270xx family of standards – Information Security Management Systems; Other international standards in the field of information technology and information securi...
standards. However, standards such as: ISO/IEC 42001 — Artificial Intelligence Management System; ISO/IEC 27001 — Information Security Management System; ISO/IEC 27701 — Privacy Information Management System; and ISO 9001...
standards are used in the defence industry and supply chains for weapons, military equipment, components, software and related services. They provide a framework for managing and controlling quality in line with the specific requirements of defence c...
standards and can easily be integrated with other management systems, such as ISO 9001, ISO 14001, ISO 45001, ISO 22000 etc. ISO 50001 is based on the continual improvement frame of "Plan-Do-Check-Act" (PDCA) ...
standards (International Featured standards). The conformity assessment checklist is aligned with the benchmarking requirements of the Global Food Safety Initiative – GFSI, EU regulations and the US Food Act – FSMA. The requirements re...
standards of quality and safety in the distribution of medicinal products for human use. ...
standards have the same objective – ensuring good environmental management. In fact, requirements of ISO 14001 are an integral part of EMAS, and at the same time EMAS builds upon the International Standard adding m...
standards such as ISO/IEC 27001 and PCI DSS have strict requirements regarding cybersecurity controls, SOC 2 does not prescribe a fixed set of controls; insteat, each organization designs and implements controls appropriate to its services, operating...
standards, supply chain security, the Prototype Protection module and other areas. More information about the key changes is available in our news article: “VDA Releases the VDA ISA2027 Catalogue.” ...
standards and covers environmental, social and governance issues. The set includes cross-sectoral and thematic standards. It is planned to publish standards specific to economic sectors and standards for small and medium-sized enterprises (SMEs), whi...
standards and business ethics can have a significant impact on compliance with human rights and is an important tool to help identify risks. SMETA (Sedex Members Ethical Trade Audit) is a widely recognized global social compliance scheme. SE...
standards and frameworks, including the Global Reporting Initiative (GRI), the principles of the United Nations Global Compact, International Labour Organization conventions and ISO 26000. EcoVadis assesses not only the existence of polici...
standards and be sufficient to satisfy the basic needs of workers and their families. Disciplinary fines are prohibited. Management Systems: Organizations seeking certification under SA8000 should go beyond mere compliance with the standard's r...
standards and best practices; including cybersecurity requirements in contractual arrangements with suppliers and subcontractors; managing risks related to critical ICT products and components, including vulnerability management and response; c...
standards, depending on the organization’s activities, sector and applicable requirements. ISO 9001 Quality management systems – Requirements specifies requirements for a quality management system and is applicable to organizations of al...
standards: ISO 14001 Environmental Management Systens – Requirements with Guidance for Use ISO 50001 Energy Management Systems – Requirements with Guidance for Use EMAS Eco-management and Audit Scheme ...
standards; providing clients with relevant information about information security. In order to safeguard its information, the organization must take the following steps: define information security policy; identify and assess security ...
standards and best practices related to corporate sustainability, social responsibility, and environmental management. Directive (EU) 2022/2464 – Corporate Sustainability Reporting Directive (EU) 2022/2464 on corporate sustainability report...
standards: ISO 18788 Management Systems for Private Security Operations. Requirement with Guidance for Use ISO 28000 Security and Resilience. Secirity Management Systems. Requirements ISO 45001 Ocupational Health and Safety Management Systems. Req...
standards. The development and implementation of a food safety system is based on the following international standards, laws and regulations of Bulgarian and European legislation: HACCP – General Principles of Food Hygiene CXC 1...
standards unifies the working process in the organization, reduces the production costs, increases the productivity, increases profits and eliminates inefficient business processes. In a broad sense, the management system consists of the str...
standards into a unified management framework. It enables an organisation to manage its processes, risks, resources and objectives in a coordinated manner while avoiding unnecessary duplication of activities and documentation. Rather than maintainin...
What additional requirements apply to suppliers in the defence industry? For companies with a quality management syst...
Changing a supplier may seem like a routine commercial decision, while extending a product's shelf life may be seen ...
NATO quality assurance requirements are of practical importance to Bulgarian companies that manufacture defence-related ...
On 16 September 2026, the International Organization for Standardization (ISO) officially published ISO 9001:2026 &ndash...
On 16 September, the world marks the International Day for the Preservation of the Ozone Layer. In 2026, the offici...
The International Organization for Standardization (ISO) will officially launch the new edition of the world’s mos...
The new edition of the world’s most widely used international standard for quality management systems – ISO ...
The German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of standards and Technology (NIS...
In April 2026, the International Organization for Standardization published the new edition of ISO 14001 &ndas...
The new edition of ISO 19011 was published in May 2026. ISO 19011 is the international standard that prov...
On 7 June, the world marks World Food Safety Day – an initiative of the World Health Organization and the Food and...
The International Organization for Standardization (ISO) has published ISO 32212:2026 — a new international s...
FSSC 22000 released Version 7 of its food safety management system certification scheme on May 1, 20...
On 15 April 2026, ISO published the fourth edition of ISO 14001 — the world's most widely adopted in...
In April 2026, the official publication of the new version of the international standard ISO 14001:2026 is expected...
Regulation (EU) 2024/2847 – better known as the Cyber Resilience Act (CRA) – is now part of the le...
In February 2026, the International Organization for Standardization (ISO) published ISO 14092:2026, “Clima...
Today, organizations are facing increasing environmental challenges, including climate change, biodiversity loss, resour...
In recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
Artificial intelligence (AI) is increasingly recognised as a key driver of economic growth, digital transformation, and ...
In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
2025 established itself as a year of significant change in the fields of management standards, information security...
With the increasing deployment of artificial intelligence (AI) systems in key public and business processes, issues rela...
With the rapid development of the Internet of Things (IoT), cloud services, mobile applications, artificial intelli...
Stay ahead of requirements and protect your certification Revisions to standards are a natural part of continuous imp...
The International Organization for Standardization (ISO) is in a decisive phase of revising the world’s most ...
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
On 14 October 2025, the International Organization for Standardization (ISO) officially released the second edition of...
In 2025, the International Organization for Standardization (ISO) published some of the most significant chang...
In the world of quality management, continual improvement is not merely a goal but a fundamental principle. The intern...
New Guidelines for Applying ISO 9001:2015 in Law Enforcement Agencies In early September 2025, the International Or...
August 2025 – The International Organization for Standardization (ISO) and the International Electrotechnic...
In August 2025, the third edition of the standard ISO/IEC 27018:2025 – "Information security, cybersecurity a...
Double the Power for Your Information Security With over a decade of consultancy experience and dozens of successfu...
A new standard helps small and medium-sized enterprises meet sustainability requirements with reduced bureaucracy. ...
The Montreal Protocol on Substances that Deplete the Ozone Layer is one of the most significant international agreements...
ISO 14064 is a series of international standards developed by the International Organization for Standardization (I...
Security, stability, and trust in institutions are fundamental to any democratic society. Among these institutions, poli...
We inform you that on May 14, 2025, IFS officially introduced the updated IFS ESG Compliance Check tool – part of ...
In the era of digital transformation, an increasing number of organizations are shifting their operations, data, and...
With the amendments to the Accounting Act of August 2024 (State Gazette, 72 of 2024, effective 6 July 2024), Bulg...
In today’s world, sustainable development and responsible resource use are key priorities for businesses and soc...
On 26 February 2025, the European Commission published the Omnibus I proposal (COM(2025)80), proposing a postponement of...
The draft amendments to the Bulgarian Cybersecurity Act aim to transpose Directive (EU) 2022/2555 (known as the NIS2 D...
In today’s business landscape, sustainable development and environmental responsibility are key drivers of long-...
In February 2025, the new standard ISO 59040:2025 – Circular Economy – Product Circularity Data Sheet was ...
The first of its kind International Summit on AI standards will take place on December 2-3, 2025, in Seoul. The initia...
With the development of quantum computers, traditional cryptographic algorithms such as RSA, ECC (Elliptic Curve Cryptog...
In today's world, the increasing plastic pollution is driving a growing demand for sustainable alternatives in pac...
Whether it’s an attempt to breach the network or a complete shutdown of information systems, cyber-attacks are hig...
Regulation (EU) 2022/2554, known as the Digital Operational Resilience Act (DORA), will take effect on January 17, ...
At a meeting of the Council of Ministers held on 03.07.2024, the government approved draft laws amending and supplementi...
What organisations should do about Amendment 1: Climate change changes to ISO 9001, ISO 14001, ISO 4500...
On 13 June 2024, the European Parliament and the Council adopted Directive (EU) 2024/1760 on corporate sustainability du...
In the context of growing global awareness of climate change and sustainability, the terms 'corporate responsibili...
Directive (EU) 2022/2555 aims to strengthen cybersecurity in the member states of the European Union and will come ...
Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...
Late last week, the International Organization for Standardization (ISO) announced the introduction of amendments to a n...
The European Union's cybersecurity rules, introduced in 2016, have been updated by Directive (EU) 2022/2555 of ...
The recent 50th meeting of ISO TC 176/SC 2, held from 8-13 October, confirmed the decision for an early revision of the ...
The first audits under IFS Food version 8 start on 1 October 2023. Version 7 audits can be conducted until the end of De...
Earlier this week, the Bulgarian standards Institute published BDS ISO/IEC 27035-1:2023 Information technology. Informat...
The automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
Commitments to achieve net zero emissions are increasing among companies, financial institutions, cities, regions and ot...
The WLA Security Control Standard (WLA SCS) is an information security management framework developed by the World Lotte...
SMETA (SEDEX Members Ethical Trade Audit) is a widely recognized audit to assess the social and ethical performance of s...
WORLD METROLOGY DAY We celebrate World Metrology Day every year on May 20 to highlight the importance of metr...
The Council of the EU has agreed on its position on the European Commission's proposal for a Directive on corporat...
In October 2022, the new edition of ISO/IEC 27005, Information security, cybersecurity and privacy protection — Gu...
ISO has published the new version of ISO/IEC 27001 under the title "Information security, cybersecurity and pr...
Taking into account the rapidly changing cybersecurity environment, ISOs are updating information security standards. Ea...
Traveling is a wonderful opportunity for rest, extreme experiences and new impressions. We present three ISO standards t...
PCI SSC released the latest update to the PCI Data Security Standard (PCI DSS) in late March this year. PCI DSS (Pa...
On 15.03.2022 ISO published a new version of the standard ISO 28000:2022 Security and resilience — Security manage...
New standard just published to help keep the hackers at bay As our cars get more connected, the risk of cybersecurity b...
On 30 June 2021, Regulation (EU) 2021/1119 of the European Parliament and of the Council was adopted, establishing a leg...
On 30 June 2021, the European Union adopted Regulation (EU) 2021/1119, known as the European Climate Law, establishing a...
At the end of 2019, the European Commission presented the European Green Deal – a comprehensive strategic framewor...
There are many standards that have an immediate application in dealing with and recovering from the pandemic: these are ...
At the end of January 2020, the international standard for ISMS audit guidelines was updated. Security of company-s...
ISO food standards create confidence in the products we eat and drink ISO food standards provide benefits for all partic...
With the eyes of the world on the 2014 Olympic Games in Sochi, hundreds of ISO standards will make the games a safe and ...
ISO 9001, Quality Management Systems - Requirements, has reached the Committee Draft stage of the revision process. Like...
ISO today published ISO 9001:2008, the latest edition of the International Standard used by organizations in 175 countri...
Certification to ISO 9001 (for quality management) and to ISO 14001 (for environmental management) increased in both cas...
A suite of new ISO standards offers the international community practical tools to address the global challenge of effec...
ISO has begun the development of ISO 21500, an international standard on project management. BSI British standards re...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































