CBE guides organizations through the implementation of ISO standards, Israeli and international standards, and complex regulations. Over 30 years of experience, hundreds of projects, and dozens of standards across quality, environment, safety, information security, privacy, AI, medical, food, and corporate responsibility.
International management frameworks for quality, environment, safety, energy, and business continuity — the foundation of any certified organizational management system.
Quality management — the leading international standard for quality management systems.
Go to pageEnvironmental management — reducing environmental impact and meeting regulatory requirements.
Go to pageOccupational health & safety — managing workplace safety risks.
Go to pageEnergy management — cost savings and emissions reduction.
Go to pageBusiness continuity — organizational resilience during disasters or disruptions.
Go to pagePsychological health at work — managing psychosocial risks.
Go to pageRoad traffic safety — managing a road safety system.
Go to pageStandards and frameworks for managing information security, defensive cybersecurity, and cloud security — protecting information assets and preventing breaches and attacks.
Information security — the leading international standard for information security management.
Go to pageCybersecurity — managing security in the cyberspace environment.
Go to pageUS information security framework for DoD and government suppliers.
Go to pageInformation security for the automotive industry — required by global automakers' suppliers.
Go to pageThird-party risk management — Third-Party Risk Management.
Go to pageService organization controls — required by US enterprise customers.
Go to pageCybersecurity maturity — Cybersecurity Maturity Model Certification.
Go to pageBank of Israel and Capital Market Authority guidelines for cyber and computing risks.
Go to pageEuropean cyber directive for critical infrastructure — risk management and incident reporting.
Go to pageDigital operational resilience for the EU financial sector — ICT risk and third-party management.
Go to pageVoluntary framework for managing cyber risks — Identify/Protect/Detect/Respond/Recover.
Go to pageStandards and regulations for privacy protection, personal data management, and GDPR — meeting Israeli and European regulatory requirements.
European data protection regulation — mandatory for processors of EU citizens' data.
Go to pageInformation security and privacy officer services for organizations.
Go to pageIsraeli privacy protection — Protection of Privacy Law (databases).
Go to pageUS medical privacy regulation — for digital health and medical devices.
Go to pageProtection of Privacy Regulations (Data Security) 2017 — security levels for databases.
Go to pageStandards and regulations for managing AI systems, AI governance, and responsibility — a framework for responsible AI development and use.
AI system management — the first international standard for an AI Management System.
Go to pageAI impact assessment — required for High Risk systems under the EU AI Act.
Go to pageEU AI regulation — the first law regulating artificial intelligence.
Go to pageCritical AI infrastructure in the EU — cyber risk management and incident reporting for AI systems.
Go to pageDigital resilience — ICT risk and third-party management for AI systems in the financial sector.
Go to pageCyber framework — structured security risk management for AI systems.
Go to pageSpecialized standards for medical devices, emergency medicine, food, cosmetics, and pharma — opening markets and meeting regulatory requirements.
Quality management for medical devices — required before FDA, CE Mark, and registration approval.
Go to pageFood safety management — HACCP and supply chain control.
Go to pageGMP for cosmetics — mandatory for cosmetics export to Europe and the US.
Go to pageHealth information security — extending ISO 27001 to medical information.
Go to pageHazard analysis and critical control points in food.
Go to pageRegistration and approval of medical equipment with the Ministry of Health.
Go to pageRisk management for medical devices across the lifecycle — required for AMR, CE Mark, and FDA approval.
Go to pageSoftware lifecycle in medical devices (SaMD) — required for regulatory approval in Israel, EU, and US.
Go to pageStandards for social responsibility, sustainability, and corporate governance — turning value commitments into recognized international certifications.
Social accountability — workers' rights and fair working conditions.
Go to pageEthical trade audit — Sedex, required by global retailers.
Go to pageIsraeli standard for organizational social and environmental responsibility.
Go to pageLeading global standard for sustainability and ESG reporting — voluntary, adopted worldwide and in Israel.
Go to pageMandatory European directive for audited sustainability reporting — relevant for companies with significant EU presence.
Go to pageIsraeli regulations and government registrations — Rav-Magen, Contractors' Register, Ministry of Defense supplier, recognized importer, and Israeli standards.
Government information security — the National Cyber Directorate framework for government IT suppliers.
Go to pageRegistration in the Contractors' Register for engineering works — a threshold requirement for public tenders.
Go to pageRegistration in the Ministry of Defense supplier database (MABAT).
Go to pageImporter recognition by the Standards Institution — expedited import without per-shipment inspection.
Go to pageStandard marks for products and preparing a product dossier with the Standards Institution.
Go to pageIsraeli standard for public transport and transit.
Go to pageMapping standards and regulations by industry — startups, manufacturing, construction, medical, finance, transport, ESG, and more.
Fast certification for technology companies — ISO 27001, SOC 2, GDPR.
Go to pageGuiding organizations to AI Act regulation and AI standards.
Go to pageQuality, safety, environment, and energy standards for factories.
Go to pageStandards for winning tenders and safety on construction sites.
Go to pageStandards for opening regulatory markets in medical devices and food.
Go to pageMeeting financial regulator requirements and information security.
Go to pageEnvironmental, occupational safety, and energy management standards.
Go to pageTISAX, ISO 39001, and IS 9301 for transport and logistics.
Go to pageSocial responsibility, sustainability, and ESG reporting.
Go to pageStandards for public institutions — quality, information security, and safety.
Go to pageGuidance with the Standards Institution, EU and US regulations.
Go to pageGovernment registrations and approvals — AMR, Contractors' Register, MOD supplier.
Go to pageThe central index page for all industries.
Go to pageCBE's knowledge center, software platform, and diagnostic tools.
Professional content articles on standardization, compliance, and management.
Index of all professional articles and posts.
Go to pageDifferences between SOC 2 and ISO 27001, and when each is required.
Go to pageManaging corrective and preventive actions in quality management systems.
Go to pageMapping, assessing, and managing organizational risks.
Go to pageHow standards help win government tenders.
Go to pagePerforming internal audits toward ISO 9001 certification.
Go to pageWhether ISO 9001 certification is economically worthwhile for an organization.
Go to pageManaging AI systems per ISO 42001.
Go to pageAbout, social, sitemap, privacy policy, accessibility, and the AI-bot page.
General information about CBE — story, team, and expertise areas.
Go to pageSocial activity, accessibility, and community initiatives.
Go to pageFull table of contents for all site pages.
Go to pagePrivacy policy and personal data protection.
Go to pageAccessibility statement and accommodations for accessible use.
Go to pageStructured documentation for AI agents and automated crawlers.
Go to page