I guess this questions is directed at Product Managers, but I would be very interested to learn what people in the know think.
What are the most common factors that drives FIPS140-2 compliance for hardware modules? Why do you want/need to implement FIPS140 compliant security in your products?
Here are a few reasons I can think of:
Customer (government) demand
Customer (individuals) demand
Customer (corporate) demand
Corporate IT Security Policy/Security Posture; (e.g. less likely to get hacked if using FIPS140 compliant modules)
To mitigate against present/future attacks; co mitigate past security holes
Bragging rights; just because you can; to prove you can do it
Because it is easy to bring into compliance
Because it is inexpensive to bring into compliance