Where to Buy ISO, IEC, and EN Standards

  • Markus Müller
  • Published on
  • 2 min read

Buying standards regularly causes confusion and frustration. Besides the question of where to get them, the price, which many consider rather high, is always an issue. This article shows where you can obtain which standards legally and which provider is the cheapest.

National and international standards

You can buy ISO, IEC, and ITU standards from the online stores of these organizations (for example the ISO store and the IEC webstore). They are also sold by the national member bodies and their publishers. In Germany, for example, the national bodies are DIN (German Institute for Standardization) and DKE (German Commission for Electrical, Electronic & Information Technologies). Their publisher is DIN Media, formerly Beuth Verlag.

National standards are different. As a rule, only the national organization that publishes them sells them. For German DIN standards, for example, this is DIN Media.

For international standards, prices usually do not differ between providers. The situation changes if a standard has been adopted in Europe, that is, published as an EN.

European standards

European standards (EN) and other deliverables (prEN, TS, TR, CWA, and so on) are officially sold by the national members of CEN and CENELEC and their partners. CEN and CENELEC do not sell standards themselves.

CEN and CENELEC publish an overview of their members and partners: Obtaining European standards.

Since the standards are usually available in English, it makes no practical difference which provider you buy from, unless you need the translation into a particular national language.

If you compare the providers, you quickly notice that prices for the same standard vary widely.

CountryPrice
Germany (DKE / DIN Media)EUR 124.24
Bulgaria (BDS)EUR 78.48
Estonia (EVS)EUR 32.24
Poland (PKN)PLN 312.30 (~EUR 71)
Cyprus (CYS)EUR 92
Serbia (ISS)RSD 6,205 (~EUR 53)
Slovakia (UNMS)EUR 21.96 to EUR 31.72
Switzerland (Electrosuisse)CHF 290 (~EUR 311)

Example comparison of selected providers for EN IEC 62443-4-1

In our comparison, the Slovak standards body UNMS has so far been the cheapest.

Its search function and website are cumbersome, however. We therefore prefer the store of the Estonian standards body EVS. It is slightly more expensive but much easier to use. Our recommendation is to order the standards you need directly from EVS: EVS search for IEC 62443

Standards are a central tool for regulatory compliance, but they are rarely self-explanatory. If you need support in classifying, selecting, or making good use of standards in the context of the CRA, the RED delegated act, or NIS2, we can clarify this in a no-obligation call.

Book a call

Choosing a CRA consultant? Here is how to find the right one.

Get the guide

Book a call

Send us your request. Together we will look at where your company stands, which questions are still open, and what the sensible next steps are.

For information on how we process your data, see our privacy policy.

Guide: How to choose the right CRA consultant

CRA consulting offers are hard to compare. One provider delivers only a gap analysis, another also supports the technical implementation, and both call themselves “CRA consultants.” If you ask the wrong questions, you end up paying for services you don't need, or you find out halfway through the project that key expertise is missing.

Our guide shows manufacturers what really matters when choosing a provider, from the expertise you need to the right pricing model and the 20 questions you should ask every provider.

What the guide covers:

  • the seven areas of expertise a complete CRA implementation requires
  • four support models depending on your in-house capacity and expertise
  • 20 specific questions for your next provider meeting
  • a red flag card for spotting warning signs quickly
  • a scoring sheet with rating guidance for a structured comparison of providers

Download it for free

Newsletter

For information on how we process your data, see our privacy policy.

Free templates: CRA reporting process

Prepare your company for the reporting obligations under the Cyber Resilience Act. You get process descriptions and templates tested in practice for:

  • reporting actively exploited vulnerabilities
  • reporting severe incidents
  • the required early warning notifications, notifications, and final reports
  • clear responsibilities, escalation paths, and deadlines

Enter your contact details and we will email you the files.

Newsletter

For information on how we process your data, see our privacy policy.

Free template: Risk assessment according to EN 50742

We use this template in our consulting projects for systematic threat assessment. You get an Excel template with:

  • a structured threat assessment for your machinery
  • a systematic way to determine safety-related security levels (SRSL)
  • documentation of vulnerabilities and protective measures

Enter your contact details and you will receive the template within minutes.

Newsletter

For information on how we process your data, see our privacy policy.

Free template: SBOM

We use this template in our consulting projects to meet the CRA requirements for the software bill of materials.

Enter your contact details and you will receive the template within minutes.

Newsletter

For information on how we process your data, see our privacy policy.

Free template: Vulnerability disclosure policy

We use this template in our consulting projects to meet the CRA requirements for vulnerability handling. You get a Word template with:

  • a structure based on EN 40000-1-3
  • predefined sections for reporting channels, response times, and responsibilities
  • safe harbor clauses for security researchers

Enter your contact details and you will receive the template within minutes.

Newsletter

For information on how we process your data, see our privacy policy.