Internet Society publishes Policy Toolkit on IoT Security and Privacy. The toolkit is mostly for policymakers and regulators to guide them in their decision-making process concerning IoT devices. The guide outlines key principles for IoT security and privacy: compliance with standards and best practices, consumer choice and control, liability and protection of consumers and small businesses, capacity building, awareness and education, and multistakeholder process. The guide concludes with suggestions for actions policymakers should take, based on the different stages of IoT development as well as cybersecurity and privacy protections in their countries: early-stage development, intermediate stage development, and advanced stage development.