If you're feeling insecure about not having all controllers/controller actions managed something you could look at is Fluent Security.
It allows security to be specified in a centralized space and in a way that is readable.
There's a good tutorial on it here.
It won't give you your site map type page, but may give you some peace of mind.