Pannon-Quality Menedzsment Tanácsadó Kft.

Our consultants are engineers and economists with corporate practice and substantial industrial experience, fluent in several languages. In day-to-day operations, we can assist our clients in the following areas:

• Implementation and integration of quality and other management systems (ISO 9001, IATF 16949, ISO 14001, ISO 20000, ISO/IEC 27001, ISO 45001, ISO 50001)
• VDA 6.1, VDA 6.2 consulting
• Preparation for the EFQM-based Excellence Award, and related consulting
• Assessment of cybersecurity compliance, and consulting on the implementation and operation of an information security management system
• Developing methods for customer and employee satisfaction surveys
• Supplier auditing
• Managing LEAN management projects (5S, VSM, SMED, TPM, Kaizen management) to uncover waste
• Managing and moderating Six Sigma improvement projects to reduce variation (e.g. MSA, SPC projects)
• Developing mission, strategy and policy, SWOT analysis

Cybersecurity and information security consulting

The Hungarian National Assembly adopted the Act on the Electronic Information Security of State and Local Government Bodies (Act L of 2013, the "Ibtv.") on 15 April 2013. Electronic information systems falling under the scope of the Ibtv. must be classified into a security category in terms of confidentiality, integrity and availability, in line with the requirements set out in the Act and its related decrees. An organisation's security level always corresponds to the highest security category among its electronic information systems.

On 1 January 2025, Act LXIX of 2024 on the Cybersecurity of Hungary entered into force, supplementing the Ibtv. and transposing the NIS2 Directive. It now obliges not only state bodies but also essential and important entities — including businesses — to comply.

We examine the security of IT systems through risk analysis. We review the adequacy of existing processes, tools and policies against the requirements of ISO/IEC 27001:2022 (the Hungarian national standard MSZ ISO/IEC 27001:2023), and assess the vulnerabilities, physical and logical protection, and risks of IT security systems.

Our management consulting process

The procedure below generally applies to the development of management systems. The process may vary depending on the client's requests and specific circumstances; for other types of consulting work, we proceed in the manner agreed with the client.

1. Consultations and advisory work
The consultant arranges consultation appointments with the client online, by phone or in person, followed by an on-site visit. For every online or in-person consultation, as well as any substantive phone discussions, we use a Meeting Minutes form to document what was discussed.

Our consultant conducts interviews and consultations with the client's representative, agrees on the division of work and the documents to be handed over, and oversees the project, during which the relevant documents are kept in an organised manner at the client's premises. Depending on the project, these may include, for example:

• Management Manual
• Management Procedures
• Work Instructions
• Forms
• Job Descriptions

As the project progresses, the consultant continuously monitors both partial achievements and the overall success of the project. Our consultant has the client confirm contractual performance via a Certificate of Completion.

2. Training
If the project includes training, our consultant introduces the client's staff to the training material as part of a training session, following a pre-planned curriculum. During the training — or at another agreed time — the consultant presents the implementation schedule for the given project, the necessary activities and deadlines, and, in agreement with the client's management, records who will be involved in the implementation process and what their responsibilities will be.

3. Situation assessment
In consultation with the client's specialists, our consultant identifies the existing situation, processes and documents relevant to the project, and gathers the information needed to carry out the commissioned task.

4. Developing the documentation system
Our consultant carries out the work as set out in the contract, always tailored to the specific project. When implementing a management system, this typically includes preparing the management system manual, the procedural instructions describing in detail how the system operates, and any forms deemed necessary — based on information gathered through on-site, personal consultations and, where needed, by phone, with the involvement of the client's specialists. On request, we also provide consultation for describing job-description-level and work-instruction-level technologies and working methods. Documents may be revised at any point throughout the project.

5. Training internal auditors
When building management systems, on request we also provide internal auditor training: our consultant, who holds the appropriate trainer qualification, trains the persons designated by the client as internal auditors, so that the client's own trained internal auditor can independently maintain the management system going forward. As part of the training, we familiarise participants with the requirements of internal auditing, auditing technique, and how to complete the required records. We provide the necessary technical setup for the training, and give every participant high-quality training material that closely follows the presentation. Participants who pass successfully receive a certificate issued by our company.

6. Implementing and continuously monitoring the system
Our consultant continuously oversees the process of implementing the documentation system and helps translate the completed documents into practice. During consultations, the consultant explains the requirements, clarifies any questions the client may have, discusses the tasks completed, and defines the next steps in preparing for internal reviews. Completed documents that meet the relevant standard and have been approved by the client are issued for practical implementation by the client's quality management representative and/or senior management.

7. Internal audit
Our lead consultant, together with the client's trained auditors (where the client has its own auditors), reviews the entire management system to verify the implementation process, identifies any nonconformities, and determines the method, responsible persons and deadline for the necessary corrections.

8. Improving the system in operation
Our lead consultant assists in correcting nonconformities identified during the audit, ahead of certification: clarifying any questions that arise, discussing completed tasks, and defining the next steps in preparing for external assessment.

9. Participation in certification
Our consultant takes part in the certification body's external audit, so as to provide fast and effective support in correcting any nonconformities that may be identified. All staff involved in the client's management system take part in the certification audit.

10. Further consulting work
For other types of consulting work (e.g. organisational development, the 5S method, developing an EFQM model), the process, its execution and the resulting documentation always depend on the client's requests, specific circumstances, and the size and complexity of the project. The procedure for this is defined before work begins, once we have gotten to know the client.