Skip to content

IoTSF Regulatory Watch survey 2026

Company & product context
1.In which country is your company headquartered?
2.In which country are you based?
3.What type of organization do you represent?
4.Approximately how large is your organization?
5.Which sectors do your products primarily serve?
6.In which geographic markets do you currently sell or plan to sell connected products?
Regulatory exposure & awareness
7.Do you know which cybersecurity regulations, standards, or labeling schemes are relevant to you?
I'm very familiar
I'm familiar
I'm somewhat familiar
I'm unfamiliar
I require support
N/A
8.Which cybersecurity regulations, standards, or labeling schemes do you consider relevant to your products?
9.How confident are you that you understand the cybersecurity regulatory requirements applicable to your products?
Very confident
Somewhat confident
Neutral
Somewhat not confident
Not at all confident
10.How difficult is it for your organization to identify which cybersecurity requirements apply to a product?
Very easy
Easy
Neutral
Difficult
11.Which sources do you primarily rely on to understand regulatory requirements?
12.Do you have existing relationships with security providers to outsource regulatory requirements?
Where the real challenges are
13.Which geographic markets present the greatest cybersecurity compliance challenges for your organization?
14.How are mutual recognition agreements supporting new market entries?
15.What makes these markets particularly challenging?
16.Have cybersecurity requirements ever made it significantly more difficult to launch a product in a particular market?
17.If yes, which market and requirement caused the difficulty?
18.Did you rely on external support to comply with cybersecurity regulations?
19.Have cybersecurity requirements ever caused your organization to:
20.Have you ever decided not to sell a product in a particular country or region because cybersecurity compliance was too difficult or costly?
21.Which regulatory requirement or activity currently creates the greatest compliance burden for your organization?
Impact on product development
22.At what stage are cybersecurity regulatory requirements typically considered in your organisation?
23.How significantly do cybersecurity regulations affect your product development process?
Very significantly
Significantly
Somewhat significantly
Not very significantly
Not at all
24.Which parts of product development are most affected?
25.Have regulatory requirements increased the time required to bring products to market?
26.Which activities have you introduced or significantly changed in response to cybersecurity regulation?
27.What is the single biggest regulatory challenge your product development teams face today?
28.Have additional security efforts resulted in advantages or efficiencies?
Enforcement versus requirements on paper
29.In which markets have you experienced cybersecurity requirements being actively checked or enforced?
30.In which markets have you encountered requirements that formally apply but appear to have little or no practical enforcement?
31.Does the expected level of enforcement affect how your organization prioritizes compliance activities?
32.In your experience, which markets have the clearest and most predictable approach to cybersecurity compliance?
Looking forward
33.Which upcoming or changing cybersecurity requirements are you most concerned about over the next 2–3 years?
34.Where would greater regulatory harmonization across legal boundries provide the most value?
35.What would make global cybersecurity compliance easier for your organization?
36.Is there a country, regulation, or cybersecurity requirement that you believe the IoT Security Foundation should investigate in more detail?
37.Where can the IoT Security Foundation better support you?