supply chains. Which Organisations Is the Service Intended For? Our AQAP implementation consulting services are intended for: Manufacturers of weapons, military equipment and other defence products. Companies manufacturing components, assem...
supply chain. Key Features of ISO 13485 Focus on Regulatory Requirements ISO 13485 is a quality management system standard intended for regulatory purposes. Organizations should determine their role within applicable regulatory requirem...
supply chain; • Strengthened control over externally provided processes, products and services and over external providers; • Understanding the needs and expectations of interested parties. In addition to customers and employees, the rang...
supply chain; a service provider that intends to demonstrate its ability to design, transition, deliver and improve the quality of services that meet the requirements for the provision of services; a service provider for monitoring, measuring and...
supply chain must take adequate control over the hazards. In fact, food safety can only be maintained through the joint efforts of all parties: governments, producers, retailers and customers. The ISO 22000 standard can be applied both independ...
supply chain", and thus it assists the efficient functioning of processes in the organization and the processes of auditing of management systems, implemented by it. The requirements defined in ISO 22301 are common and their ap...
supply chains and cloud services; plan for and manage information security incidents; maintain information security at an appropriate level during disruption; address applicable legal, statutory, regulatory and contractual requirements; monit...
supply chain. It requires the organization to: assess the security environment in which it operates, including the supply chain with its dependencies and interdependencies; identify adequate security measures to manage effectively the securit...
supply chain losses resulting from cargo theft. The association provides a range of industry standards, training, incident investigation, route planning and tools. TAPA operates in three regions: Europe, the Middle East and Africa (EMEA), the Amer...
supply chain face increasingly demanding requirements related to risk management, traceability, and regulatory compliance. In this context, FSSC 22000 has established itself as one of the most recognized food safety certification schemes worldwide. ...
supply chain security; security in system development and maintenance; vulnerability handling and disclosure; access control policies and asset management; use of cryptography and encryption; multi-factor authentication; training and cybe...
supply chain thanks to the improved energy efficiency; Use of tax benefits and other financial benefits for improved energy efficiency. ...
supply chains for weapons, military equipment, components, software and related services. They provide a framework for managing and controlling quality in line with the specific requirements of defence contracts. Unlike ISO 9001, which applies to or...
supply chain against intentional contamination by implementing action plans, risk assessments and employee training programs. The standard contains requirements for allergen management and requires proper separation, cleaning protocols and clear l...
supply chain management. The drug distribution network is becoming increasingly complex and involves many parties. The GDP Guidance establishes tools to assist wholesale distributors in carrying out their activities and to prevent fals...
supply chain and to enable the results of a single assessment to be recognised by multiple manufacturers and business partners. TISAX assessments are conducted against the VDA Information Security Assessment (VDA ISA) catalogue, which contains infor...
supply chain for compliance with labor and social standards and business ethics can have a significant impact on compliance with human rights and is an important tool to help identify risks. SMETA (Sedex Members Ethical Trade Audit) is a wid...
supply chain. The EcoVadis methodology is tailored to the organization’s industry, size and location. Of the 21 sustainability criteria covered by the methodology, those relevant to the profile of the company being assessed are activate...
supply chain security. Organisations are required to manage risks arising from third-party suppliers, products, services, and ICT components. Entities must ensure that critical elements of their supply chains do not pose cybersecurity risks. Key o...
supply chains. Many organisations, particularly in the financial, healthcare, and public sectors, now require their suppliers and partners to hold Cyber Essentials or Cyber Essentials Plus certification. This helps reduce third-party risk and ensures...
supply chain. Other standards and guidance documents are also used in the development, implementation, maintenance and improvement of quality management systems, including ISO 9000 Quality management — Fundamentals and vocabulary, ISO&nbs...
supply chain management. ISO 26000 – Social Responsibility Guidelines ISO 26000 provides a framework for developing socially responsible policies and practices within organizations. The standard covers key aspects such as human rights, labo...
What additional requirements apply to suppliers in the defence industry? For companies with a quality management syst...
NATO quality assurance requirements are of practical importance to Bulgarian companies that manufacture defence-related ...
The European Commission has presented the European Technological Sovereignty Package, one of the most significant initia...
The German Association of the Automotive Industry (VDA) has officially released the new information security assessment ...
The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
In April 2026, the International Organization for Standardization published the new edition of ISO 14001 &ndas...
After 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
FSSC 22000 released Version 7 of its food safety management system certification scheme on May 1, 20...
On 15 April 2026, ISO published the fourth edition of ISO 14001 — the world's most widely adopted in...
In April 2026, the official publication of the new version of the international standard ISO 14001:2026 is expected...
With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
Regulation (EU) 2024/2847 – better known as the Cyber Resilience Act (CRA) – is now part of the le...
With the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
2025 established itself as a year of significant change in the fields of management standards, information security...
The International Organization for Standardization (ISO) is in a decisive phase of revising the world’s most ...
In 2025, the International Organization for Standardization (ISO) published some of the most significant chang...
In the world of quality management, continual improvement is not merely a goal but a fundamental principle. The intern...
On July 23, 2025, the International Court of Justice (ICJ) published its Advisory Opinion in the case “Obligatio...
We inform you that on May 14, 2025, IFS officially introduced the updated IFS ESG Compliance Check tool – part of ...
In today’s world, sustainable development and responsible resource use are key priorities for businesses and soc...
On 26 February 2025, the European Commission published the Omnibus I proposal (COM(2025)80), proposing a postponement of...
In February 2025, the new standard ISO 59040:2025 – Circular Economy – Product Circularity Data Sheet was ...
Today, every organisation faces threats such as hacking, ransomware and careless data handling. An Information Security ...
The automotive industry has changed rapidly in recent years with the advent of new technologies. The ever-increasing...
FSSC 22000 is an internationally recognized food safety audit and certification scheme for organizations in the food sup...
SMETA (SEDEX Members Ethical Trade Audit) is a widely recognized audit to assess the social and ethical performance of s...
Good distribution practice (GDP) is a quality system for warehouses and distribution centres that handle medicines. GDP ...
ISO/SAE 21434:2021 is an international standard that addresses cyber security in the engineering of electrical and ...
The Council of the EU has agreed on its position on the European Commission's proposal for a Directive on corporat...
On 15.03.2022 ISO published a new version of the standard ISO 28000:2022 Security and resilience — Security manage...
New standard just published to help keep the hackers at bay As our cars get more connected, the risk of cybersecurity b...
On 30 June 2021, the European Union adopted Regulation (EU) 2021/1119, known as the European Climate Law, establishing a...
On 30 June 2021, Regulation (EU) 2021/1119 of the European Parliament and of the Council was adopted, establishing a leg...
At the end of 2019, the European Commission presented the European Green Deal – a comprehensive strategic framewor...
TISAX is an assessment and exchange mechanism for the information security of enterprises in the automotive supply chain...
ISO food standards create confidence in the products we eat and drink ISO food standards provide benefits for all partic...
ISO today published ISO 9001:2008, the latest edition of the International Standard used by organizations in 175 countri...
Certification to ISO 9001 (for quality management) and to ISO 14001 (for environmental management) increased in both cas...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































