When I was working designing poker machine electronics, we had a similar problem.
The human body model is a standard, see
http://en.wikipedia.org/wiki/Human-body_modelThat doesn't specify a voltage. The commercial testers allow discharge voltage to be set at various levels, typically up to many KV. It's meant to simulate the charge a human can pick up in typical environments, like walking across a thick carpet in dry air.
However we didn't have to just deal with the 'human body model' ESD. Some gamblers like to see if they can crash the machines using piezo spark lighters, and other improvised sparky things. So we needed to design to the 'human bastard model'.
Here are some pics of the improvised ESD torture rig I made. There was an adjustable zero to 10KV supply, that could be configured for positive or negative output relative to ground.
That was connected to the insulated post at the corner of this device. It would charge up a 1000pF 10KV rated ceramic disk capacitor via the 4 Meg ohm resistor. From the capacitor there's an adjustable spark gap. The other side of the spark gap can be jumpered to the earth, active or neutral mains input of the equipment, or via a flying lead and an insulating rod handle, held close to parts of the machine chassis, so the spike would arc to the case.
The big yellow toroids are to block the spike from going back up the mains source. Actually they turned out to not be able to withstand the voltage, and would arc across the windings. So on the commonly used one (earth) I added another ferrite with better insulated wire wound through it. (One lead of this yellow torrid is broken off its solder lug in the photos.)
The metal baseplate is a sort of ground plane - it's the other side of the HV disk capacitor, inductively shorted to mains ground, and could be given varying degrees of coupling to parts of the EUT chassis.
If you make something as death-trappy as this, be sure to have lots of warning signs when in use. And disconnect from mains when you're not actually using it.
Edit: Oh, I forgot to mention. We got a big sheet of galvanized iron sheet, about 3m x 3m, and used that as a reference plane for those zapping experiments. We'd mount the zapper with its 'ground' in contact with the sheet, and the poker machine standing on insulators on the metal sheet. All the better to kill it.
We did get the machine to the point where it could survive that treatment without a glitch. Mostly by having the processor in an inner metal box, with all IO fully opto-isolated. And very, very careful separation of dirty and clean ground planes.