Building a Secure & Connected Future
CEN, CENELEC and ETSI develop European standards; ISO and IEC publish international standards. A European standard is not automatically a harmonised reference for every EU law. Check the applicable legislation and the exact citation, edition and restrictions in the Official Journal before relying on a presumption of conformity.
🔐 Information Security
Use ISO/IEC 27001 to establish an information security management system and manage risks to information.
📡 IoT & Connectivity
Use ETSI EN 303 645 as a consumer-IoT cybersecurity baseline. It does not guarantee security or establish general device compatibility.
♿ Digital Accessibility
Use EN 301 549 to assess applicable ICT accessibility requirements, alongside the relevant law and tender specification.
Essential Standards for the Tech Sector
These references address different technical or management needs. Select the applicable scope and version; the table is not a list of compulsory standards for every product or service.
| Standard | Title / Scope | Key Benefit |
|---|---|---|
| ISO/IEC 27001 | Information Security Management | Requirements for managing information-security risks. |
| EN 301 549 | Accessibility requirements for ICT | ICT accessibility requirements; legal effect depends on the applicable framework and cited version. |
| ETSI EN 303 645 | Cyber Security for Consumer IoT | Baseline cybersecurity provisions for consumer IoT. |
| ISO/IEC 20000-1 | IT Service Management | Requirements for a service management system. |
| TL 9000 | Telecom Quality Management | ICT quality-management requirements and measurements built on ISO 9001. |
| IEC 62368-1 | Audio/Video/IT Equipment Safety | Energy-source classification and safeguards for equipment within its scope. |
Plan the Right Compliance and Assurance Work
Separate product-conformity evidence, accessibility evaluation and organisational certification before choosing a provider.
- Product scope: The Radio Equipment Directive applies to radio equipment within its scope. Other electrical products may fall under the EMC and Low Voltage Directives, depending on their characteristics. Identify the applicable legislation and conformity-assessment route before selecting tests or affixing CE marking.
- Information security: ISO/IEC 27001 concerns management of information-security risks. Certification covers a defined management-system scope; it is not a guarantee against breaches or ransomware and does not replace product-specific duties.
- Public procurement: Check the specific tender and applicable accessibility rules. There is no single requirement that every public purchase of software or digital services use EN 301 549; public procurement rules also provide for equivalent technical solutions in relevant circumstances.
- Interoperability: Specify the relevant protocols, versions and profiles, and test the actual integrations. Standards can support compatibility, but a standard number alone does not prove end-to-end interoperability.
📥 Access Official Tech Standards
Browse EN, ISO, IEC and ETSI references in the Genorma catalogue. Check scope, edition, amendments, availability and licence before ordering; some ETSI publications are available directly from ETSI.
Frequently Asked Questions
Is EN 301 549 mandatory for websites?
The Web Accessibility Directive sets accessibility obligations for covered public-sector websites and mobile apps. Conformity with the relevant requirements of an Official Journal-cited harmonised standard can provide a presumption of conformity for the legal requirements it covers. The European Accessibility Act is a separate framework for specified products and services, with exemptions and transitional provisions; it does not make EN 301 549 compulsory for every private website. Assess scope and national implementing rules.
What is the difference between ETSI and ISO?
ISO is an international standards organisation; ISO/IEC 27001 is published jointly with IEC. ETSI is a recognised European standards organisation working on telecommunications and other ICT fields. Not every ETSI publication is a harmonised standard. Harmonised standards generally remain voluntary technical routes to meeting the legal requirements they cover.
How does IEC 62368-1 affect electronics manufacturers?
IEC 62368-1 addresses safety of audio/video, information and communication technology equipment within its scope, using energy-source classification and safeguards. Check the product scope, applicable law, relevant national or regional adoption, and cited edition. Publication of a new IEC edition does not make it automatically compulsory for all equipment in the EU or US.
Choose the Right Specialist Route
For EMC, radio or electrical-safety testing, request laboratory support. Include the product, radio functions, target markets, proposed methods and intended use of the test report; confirm the laboratory's accreditation scope for the work.
For ISO/IEC 27001 implementation, internal audit or certification-body selection, submit an ISO specialist enquiry. For accessibility or an unresolved regulatory-scope question, describe the product or service and the support needed.
Official Sources and Scope References
- European Commission: harmonised standards and voluntary use and Radio Equipment Directive.
- Accessibility: Commission guidance on the Web Accessibility Directive and harmonised standards; European Accessibility Act, particularly Articles 2, 4, 14 and 15.
- Public Procurement Directive, Article 42 on technical specifications and equivalence.
- Technical scopes: ISO/IEC 27001, ETSI EN 303 645 V3.1.3 and IEC 62368-1.
- TIA QuEST Forum's TL 9000 handbook overview.
Sources checked on 28 September 2026. Confirm subsequent legal amendments and the current cited standards before relying on them for a specific product or service.
Explore Standards for Other Industries
Navigate to other key sectors to find relevant European and International standards.