From discovery to control

A snapshot tells you where to start; governance changes what happens next

An inventory and a control plane answer different questions. The first identifies evidence and gaps. The second applies policies to traffic that has been connected.

Current DUBSAR status

Two stages with different proof levels

The Flash Audit and the Gateway must not be presented as interchangeable. Discovery depends on authorised sources; enforcement depends on traffic actually crossing the Gateway.

From discovery to control

Discovery establishes a first perimeter

A point-in-time audit can show known services, accounts, owners and inconsistencies in the sources available. It gives decision-makers a common starting point.

It cannot guarantee that the estate remains unchanged after the report or that every unconnected use has been found.

From discovery to control

Continuous governance needs connected traffic

Once a selected flow is routed through the Gateway, DUBSAR can ask the Core for a deterministic decision before forwarding it. That creates a different kind of evidence: what policy was applied to a real request at a specific time.

Coverage grows one declared route at a time rather than through a blanket claim that everything is controlled.

  • Discover identifiable use
  • Select a meaningful pilot flow
  • Define policy and ownership
  • Observe decisions and expand only after review

From discovery to control

Both views belong in the Cockpit

A responsible person needs to see the difference between discovered, connected, protected and out-of-scope systems. Combining them into one score would hide important uncertainty.

DUBSAR therefore treats coverage status as evidence in its own right, not as an implementation detail.

Frequently asked questions

What to know before going further.

Is the Flash Audit continuous monitoring?

No. It is a point-in-time view based on authorised sources. Continuous decisions require a connected Gateway flow.

Must every workflow be connected at once?

No. DUBSAR is designed for a controlled pilot followed by progressive expansion based on evidence.