As IoT devices proliferate public spaces, it is vital that adequate governance structures and policies are designed and implemented in order to enhance trust, and protect privacy and security of citizens. At a local level, smaller towns and cities that are not part of the ‘smart city’ movement, but instead are connected through IoT devices, also need to consider how these devices are governed. This research explores how two novel methods (design fiction and walkshops) can be combined and embedded in the design of policy for IoT governance at a local level. The contribution of the work lies in wider discussions of design methods in policy making and offers a case study of how these methods can be used at a local level.