From discovery to control
A snapshot tells you where to start; governance changes what happens next
An inventory and a control plane answer different questions. The first identifies evidence and gaps. The second applies policies to traffic that has been connected.
Current DUBSAR status
Two stages with different proof levels
The Flash Audit and the Gateway must not be presented as interchangeable. Discovery depends on authorised sources; enforcement depends on traffic actually crossing the Gateway.
From discovery to control
Discovery establishes a first perimeter
A point-in-time audit can show known services, accounts, owners and inconsistencies in the sources available. It gives decision-makers a common starting point.
It cannot guarantee that the estate remains unchanged after the report or that every unconnected use has been found.
From discovery to control
Continuous governance needs connected traffic
Once a selected flow is routed through the Gateway, DUBSAR can ask the Core for a deterministic decision before forwarding it. That creates a different kind of evidence: what policy was applied to a real request at a specific time.
Coverage grows one declared route at a time rather than through a blanket claim that everything is controlled.
- Discover identifiable use
- Select a meaningful pilot flow
- Define policy and ownership
- Observe decisions and expand only after review
From discovery to control
Both views belong in the Cockpit
A responsible person needs to see the difference between discovered, connected, protected and out-of-scope systems. Combining them into one score would hide important uncertainty.
DUBSAR therefore treats coverage status as evidence in its own right, not as an implementation detail.
Frequently asked questions
What to know before going further.
Is the Flash Audit continuous monitoring?
No. It is a point-in-time view based on authorised sources. Continuous decisions require a connected Gateway flow.
Must every workflow be connected at once?
No. DUBSAR is designed for a controlled pilot followed by progressive expansion based on evidence.
Read next
Continue with another DUBSAR guide.
The portal remains in private testing. These guides explain what DUBSAR is proving — and what it does not yet claim.