The document is a user guide for Vestibu's one-stop GDPR compliance management software. It provides instructions on how to use the compliance assessment module to gauge an organization's readiness to meet GDPR requirements. Key features include creating and modifying assessments, viewing assessment results, and a dashboard with graphical results. The software automates privacy impact assessments and helps ensure accountability and compliance with GDPR.

1. www.vestibu.com
One-Stop Intelligent GDPR Compliance Management Software
Compliance Assessment Guide
Release 0.0.1

2. One-Stop Intelligent GDPR Compliance Management Software
Vestibu GDPR Compliance Assessment Guide
Prepared for:
Vestibu Customers
15 May 2018
Version 0.0.1
Disclaimer
No part of this document maybe reproduced in any form without the written permission ofthe
copyright owner.
The contents of this document are subject to revision without notice due to continued progress
in methodology,design,and manufacturing.Vestibu LLC shall haveno liabilityfor anyerror or
damage of anykind resultingfrom the use of this document.
Vestibu products,content and materials are for informational purposes onlyand not for the
purpose ofprovidinglegal advice. You should contact your attorneyto obtain advice with
respect to anyparticular issue.Vestibu materials do not guarantee compliance with applicable
laws and regulations.

3. VestibuCompliance Assessment Guide
iii
Copyright © 2018 Vestibu. All rightsreserved. Proprietaryand Confidential
Introduction
Welcome to the Vestibu User Guide, your comprehensiveguide to getting started with Vestibu.
Vestibu is the leadingglobal software to operationalize dataprivacycompliance and Privacy by
Design.
Vestibu automates privacyimpact assessments and data mapping,identifies privacyrisks,and
enforces risk management and control activities in an integrated and agile approach.
Our web-based software provides a central repositoryfor privacy professionalsto collaborate
with business groups,service providers and trusted advisors managingprivacyrisks across
customer data,employee data,and vendor data transfers.
The result is the abilityto demonstrate accountabilityand compliance with EU’s data protection
requirements (GDPR, BCR,Privacy Shield),and globallyacross privacy jurisdictions and
frameworks.
Purpose
This User Guide is designed to walk you through the different functionalities within the Vestibu
Platform.

4. VestibuCompliance Assessment Guide
Page iv
Copyright © 2018 Vestibu. All rightsreserved. Proprietaryand Confidential
Table of Contents
1 Compliance Assessment......................................................................................................... 5
1.1 Introduction...................................................................................................................... 5
1.2 Assessment....................................................................................................................... 6
1.2.1 Assessment List......................................................................................................... 6
1.2.2 Creating New Assessment......................................................................................... 7
1.2.3 Modifying an Assessment......................................................................................... 7
1.2.4 Viewing Result........................................................................................................... 9
1.2.5 Deleting Assessment............................................................................................... 10
1.3 Dashboard ...................................................................................................................... 10

5. VestibuCompliance Assessment Guide
Page 5
Copyright © 2018 Vestibu. All rightsreserved. Proprietaryand Confidential
1 Compliance Assessment
Vestibu Compliance Assessment provide a guide for organizations to gauge their positionto
meet requirements ofGDPR. The compliance solution will transform a complex and time-
consumingproject into efficient processes,and is suitable for organizations ofall sizes, ranging
from small to global companies.
1.1 Introduction
Compliance Assessment Modulehas introductionpage that contains:
1. View Infographic: GDPR definitionand information in graphical form
2. Download Documentation: documentation ofcompliance assessment module
Introduction Assessment Dashboard

6. VestibuCompliance Assessment Guide
Page 6
Copyright © 2018 Vestibu. All rightsreserved. Proprietaryand Confidential
1.2 Assessment
Compliance assessment process can be started from menu Compliance Assessment:
1.2.1 Assessment List
Assessment List will provide you with list of assessment that you have created,completeness
percentages and score for each assessment.
Note:
ONLY ASSESSMENTS THAT YOU OR YOUR COLLEAGUES IN THE SAME COMPANY HAVE CREATED WILL
BE SHOWN HERE

7. VestibuCompliance Assessment Guide
Page 7
Copyright © 2018 Vestibu. All rightsreserved. Proprietaryand Confidential
1.2.2 Creating New Assessment
Before start taking the assessment,we need to create new assessment first.
1. Navigate to Assessment from Navigation Menu
2. Click New
3. Type label name for new assessment
4. Click Create New
1.2.3 Modifying an Assessment
Start fillingthe questionnaire or edit existingassessment via details menu.
1. Navigate to Assessment from Navigation Menu
2. Click Details button on the right of chosen assessment.

8. VestibuCompliance Assessment Guide
Page 8
Copyright © 2018 Vestibu. All rightsreserved. Proprietaryand Confidential
3. You can find (1) Module Name, (2) Sub Module Name, (3) Question has been answered
and total question for each sub module on left panel.You can move freely between
each module to finish questionnaire byclickingthe sub module name.
4. And right panel will be contained (1) Question number,(2) Question,(3) Related GDPR
Article that has linkto article detail,(4) Answer options,(5)Justification / notes,(6)
Evidence flag, and (7) File attachments box.

9. VestibuCompliance Assessment Guide
Page 9
Copyright © 2018 Vestibu. All rightsreserved. Proprietaryand Confidential
5. Choose one of available optionto answer question.Your answer will be saved
immediately.
6. You can add optional free text justification / notes or attach files to strengthen your
answer.
7. Click Next if you have finished answeringcurrent question or click Previous
if you want to change your answer on previous question.
1.2.4 Viewing Result
If you have finished the questionnaire,you can view your result immediatelyfrom assessment
list.
1. Navigate to Assessment from Navigation Menu
2. Click View Result button on the right of chosen assessment.
3. You can find (1) Assessment label name, (2) Module Name, (3) Compliance Progress,
(4) Sub Module Name, (5) Question and Answer Details in View Result page. Both
module name and sub module name are foldable and collapsible to showmore details.

10. VestibuCompliance Assessment Guide
Page 10
Copyright © 2018 Vestibu. All rightsreserved. Proprietaryand Confidential
1.2.5 Deleting Assessment
You can delete existingassessment too.
1. Navigate to Assessment from Navigation Menu
2. Click Delete button on the right of chosen assessment.
3. Click Yes on pop up windowto confirm deletion
1.3 Dashboard
Comprehensivegraphical result for taken assessment can be accessed from Dashboard menu.

11. VestibuCompliance Assessment Guide
Page 11
Copyright © 2018 Vestibu. All rightsreserved. Proprietaryand Confidential
On top of main page, you will find result of taken assessment
Which is consist of:
1. Assessment Label Name
2. Summary of compliance readiness for all module
3. Summary of compliance readiness for each module
4. Menu to modify current assessment
5. Menu to view detail result ofcurrent assessment
6. Menu to print result into pdf file
On bottom of main page, you will find chart graphic that showassessment progress for all
assessments that havebeen created.

12. VestibuCompliance Assessment Guide
Page 12
Copyright © 2018 Vestibu. All rightsreserved. Proprietaryand Confidential
Each bar can be clicked to change assessment result that shown on top page.