training and offer comprehensive support throughout the implementation process, ensuring that the solutions developed are effective, sustainable and aligned with the organization’s objectives. For every project, we apply rigorous quality con...
training tailored to the specific roles and responsibilities of the managers and employees involved in the management system. This helps translate the requirements of the relevant standard into clear responsibilities and effective working practices. ...
training - name, email, phone; sending a CV to the office e-mail, in connection with advertisements published in "Careers" - three names, date of birth, address, telephone, e-mail address, photo, education, professional qualification, dat...
training of internal auditors; performing internal audits. STAGE 5 Certification and obtaining a certificate: (performed by a certification organization*) selection of a certification organization and during the performance of the certi...
training on implementing the requirements of the new standard version; Performing internal audits to verify compliance with the updated requirements; Offering consulting and support during surveillance, recertification, and special audits. C...
training – of key employees engaged in the process of implementation and implementation of the new requirements; consulting – assistance in the implementation of new/changed business processes, internal controls, work organization and r...
training. Targeted training. You focus your efforts on the departments and individuals who need it. Evidence of compliance. The report serves as evidence of awareness measures during an inspection or audit. A culture of reporting. Employees lea...
training... THE STAGES OF CONSULTATION FOR THE IMPLEMENTATION OF A REGULATORY REQUIREMENT CAN BE CONVENTIONALLY DIVIDED INTO: GAP analysis and evaluation of the current level of compliance; Preparation of rules and procedures for fulfilling the requirement...
training; • conducting internal audits; • preparation for certification. Our team has practical experience working with organizations from different sectors and can support you in achieving an effective and timely transition to the new e...
training. Key highlights include: Network traffic monitoring Protection against DoS attacks Asset and vendor management Applying secure design principles for applications and infrastructure The standard emphasizes the importance of pro...
training; use of new approaches to supply chain security management; optimizing costs to maintain the required level of security of the supply chain (or part of it); improving the organization's reputation as a reliable market partner for t...
training, awareness and internal communication to support a culture of integrity and compliance; establishing mechanisms for reporting, investigation and corrective actions; monitoring, internal audit, management review and continual improvement ...
training, configuration management , audits and monitoring. Can NIST SP 800-53 Improve Your Organization's Security System? Yes. Although it was originally intended for use by US federal government agencies, it can help organizations in...
training, incident investigation, route planning and tools. TAPA operates in three regions: Europe, the Middle East and Africa (EMEA), the Americas, Asia and the Pacific. TAPA EMEA offers 3 supply chain security standards: FSR – Facili...
training; internal audit and management review; certification audit conducted by an accredited certification body. Following successful completion of the certification audit, the organization receives an FSSC 22000 certificate, which is mai...
training of staff. 3. The quality management system shall also prescribe the specific monitoring requirements set out in Annexes I and II for each criterion. 4. Where any of the treatments referred to in Section 3.3 of Annex I or Section 3.3 of Ann...
training and operational use; information for interested parties – transparency, user documentation, incident reporting; intended use and responsible use of AI systems; third-party relationships – suppliers and customers across the ...
training and cyber hygiene. The measures must ensure a level of security appropriate to the identified risks. 2. Role of the Management Body The management body bears direct responsibility for: approving cybersecurity risk management mea...
training; employment and workers management; access to essential public and private services; law enforcement; migration, asylum and border control; administration of justice; and democratic processes. High-risk AI systems are subject ...
training... The International Standard ISO 50001 focuses on supporting organizations in their efforts to establish systems and processes necessary for better energy performance including energy efficiency, energy use and energy consumption. Implemen...
training programs. The standard contains requirements for allergen management and requires proper separation, cleaning protocols and clear labeling of accurate ingredient lists and allergen declarations on product packaging. IFS Food introduces re...
training and development, non-discrimination and other labor and human rights issues. Ethics – measures to prevent corruption and conflicts of interest, responsible information management and other relevant aspects of business ethics. Susta...
training on health and safety; implementing a system for identifying health and safety hazards; and providing access to sanitary facilities and drinking water. Freedom of Association and Right to Collective Bargaining: The right to organize and joi...
training and basic cyber hygiene practices; policies on the use of cryptography and, where appropriate, encryption; human resources security, access control policies and asset management; incident management planning; use of multi-factor auth...
training for management and employees, internal audits, and preparation for a certification audit. Benefits of Implementing a Quality Management System Implementing a quality management system can support an organization in: improving p...
training, internal audits and management reviews; More efficient use of resources – optimisation of the time, effort and costs involved in implementing and maintaining management systems; Coordinated risk management – consideration of...
What additional requirements apply to suppliers in the defence industry? For companies with a quality management syst...
Changing a supplier may seem like a routine commercial decision, while extending a product's shelf life may be seen ...
Every October, Europe marks European Cybersecurity Month (ECSM), an annual European initiative to raise cybersecurity aw...
Ahead of European Cybersecurity Month (ECSM) 2026, attention is once again turning to one of the most important elements...
On 16 September 2026, the International Organization for Standardization (ISO) officially published ISO 9001:2026 &ndash...
The new edition of the world’s most widely used international standard for quality management systems – ISO ...
The European Commission has presented the European Technological Sovereignty Package, one of the most significant initia...
On 2 August 2026, the next key stage in the application of Regulation (EU) 2024/1689 laying down harmonised rules on art...
The NIST Cybersecurity Framework (CSF) 2.0 was published by the U.S. National Institute of Standards and Technology (NIS...
In April 2026, the International Organization for Standardization published the new edition of ISO 14001 &ndas...
On 7 June, the world marks World Food Safety Day – an initiative of the World Health Organization and the Food and...
After 1 June 2026, the transitional 50% reduction of fines and administrative fines will no longer apply The transiti...
FSSC 22000 released Version 7 of its food safety management system certification scheme on May 1, 20...
On 15 April 2026, ISO published the fourth edition of ISO 14001 — the world's most widely adopted in...
With the amendments to the Bulgarian Cybersecurity Act adopted in connection with the transposition of Directive (EU) 20...
With the amendments to the Cybersecurity Act, promulgated in State Gazette No. 17 of 13 February 2026, the Bul...
On 10 February 2026, on the occasion of Safer Internet Day, the European Commission presented the EU Action Pla...
After repeated postponements, the National Assembly has adopted at second reading the amendments and supplements to the ...
In recent years, the requirements imposed on participants in public procurement procedures have become increasingly stri...
In today’s dynamic business environment, choosing the right consulting organization is a key factor for sustainabl...
2025 established itself as a year of significant change in the fields of management standards, information security...
Stay ahead of requirements and protect your certification Revisions to standards are a natural part of continuous imp...
The International Organization for Standardization (ISO) is in a decisive phase of revising the world’s most ...
ISO/IEC 27701:2025 – Information security, cybersecurity and privacy protection — Privacy information manage...
In 2025, the International Organization for Standardization (ISO) published some of the most significant chang...
“GAME ON!” – Behavioral Change Towards Digital Threats October 2025 will once again be dedi...
In the world of quality management, continual improvement is not merely a goal but a fundamental principle. The intern...
A new standard helps small and medium-sized enterprises meet sustainability requirements with reduced bureaucracy. ...
In the digital age, cybersecurity is a key element for the success of any organization. With the increasing threat of ...
In 2024, the global economy saw a growth of 3.2% compared to the previous year, reaching approximately 105 t...
With the development of quantum computers, traditional cryptographic algorithms such as RSA, ECC (Elliptic Curve Cryptog...
Regulation (EU) 2024/2847 of the European Parliament and of the Council, better known as the Cyber Resilience Act (CRA),...
Regulation (EU) 2022/2554, known as the Digital Operational Resilience Act (DORA), will take effect on January 17, ...
What organisations should do about Amendment 1: Climate change changes to ISO 9001, ISO 14001, ISO 4500...
Municipal enterprises (including municipal companies and structures providing public services) increasingly manage criti...
Taking into account the rapidly changing cybersecurity environment, ISOs are updating information security standards. Ea...
With the eyes of the world on the 2014 Olympic Games in Sochi, hundreds of ISO standards will make the games a safe and ...
ISO 9001, Quality Management Systems - Requirements, has reached the Committee Draft stage of the revision process. Like...
Implementation of management standards
CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.
The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.


































