The state of the art in societal impact assessment for security research

This paper sets out a structured methodology for conducting a societal impact assessment (SIA) of security research and security measure implementation. It first provides an overview of the need for and role of SIA, then presents an account of the existing impact assessment methodologies that have influenced this guide. The paper then describes the core methodology based upon an iterative approach to six key sectors of impact, then provides analytical questions for use in this process, before setting out a step-by-step process guideline. This guideline includes guidance on identifying stakeholders and incorporating best practice in impact assessment. Guidance on the content of an SIA report is then provided. The paper concludes with recommendations as how to best embed such a methodology within the broader security research process. The methodology has particular relevance for security research conducted within the EU.