Scenario Test Specification, Volume 2: Security Impact Measurement