The process of locating where and how cryptography is implemented to expose unmanaged risk and migration scope.