Mercury Security has released its 2026 Trends in Access Controllers Report, revealing how changing cybersecurity requirements, interoperability needs, cloud adoption and emerging technologies are putting greater emphasis on the role controllers play in long-term physical access control strategy.
Based on a global survey of 561 physical security and cybersecurity professionals, including administrators responsible for access control management, systems integrators, installers and end users, the report found that 78% of respondents consider the controller important or critical to their physical access control system (PACS) strategy, up from 72% in 2025. This growth reflects the controller's expanding role in the security environment. As it connects more devices, systems and applications across the security environment, organizations are placing greater importance on infrastructure that can address current requirements while supporting new capabilities over time.
Cybersecurity represents one of the clearest gaps between respondents’ requirements and their existing infrastructure. 32% say cybersecurity features are missing from their current controller systems, up from 21% in 2025. The gap comes as 74% reported cybersecurity and IT coordination have become more complex to manage, even as 86% say their organizations actively work to stay current with changing cybersecurity and data protection standards.
“Organizations recognize the cybersecurity risks facing connected access control systems, but the infrastructure in place isn’t always keeping pace,” said Steve Lucas, vice president, sales, Mercury Security. “As they look to modernize, users also want to protect existing investments. That makes interoperability increasingly important and puts more weight on choosing controller platforms that can address current security requirements while providing the flexibility to support what comes next.”