Unified Visibility Across Global Estate With Threat Aware & Teneo

The Challenge

Before partnering with ThreatAware, Bird & Bird’s security team could not get a straight answer to a simple question: how many devices do we really have, and are they all protected? Multiple tools reported different numbers. SCCM, Intune, Tenable, Cortex and ServiceNow each had their own console, their own reports, and their own view of the world. None of them matched. Security and infrastructure teams spent hours exporting data and comparing spreadsheets, only to end up with conflicting answers.

The team could see there were gaps, but they had no reliable way to measure or prioritize them. Devices that did not appear in every system could easily be missed. Renewals such as Cyber Essentials Plus demanded data from several teams and systems, adding to the workload. Cyber insurers increasingly wanted proof that controls were working everywhere, not just deployed in theory. Large programs such as the firm’s Windows 10 end-of-life migration also depended on accurate, up-to-date inventory data, which was hard to guarantee without a single trusted source.

Teneo, a long-standing partner of Bird & Bird, helped introduce ThreatAware to the Bird & Bird team. ThreatAware gives organizations complete visibility and control over their cyber assets. Together, helping customers reduce risk, simplify compliance, and maximize the value of existing security investments.

The ThreatAware Solution

Bird & Bird selected ThreatAware to act as a single source of truth for security-relevant asset data and to strengthen its cybersecurity asset management across its global estate. ThreatAware was integrated with 13 existing systems, including on-premise and SaaS tools, through API connections. Deployment did not require agents and needed only light internal effort:

• Cloud-based platform: no complex on-premise infrastructure to maintain.
• Agentless integration: data flows directly from existing tools.
• Fast time to value: usable data appeared in hours, not weeks.

A key factor in the decision was the integration with Tines, which Bird & Bird had recently adopted for security automation. ThreatAware not only surfaces issues; it can also trigger automated workflows to start remediation straight away.

ThreatAware now provides:

• A single, consolidated inventory of all devices across Bird & Bird’s global environment.
• Clear visual indicators (tick or cross) to show which security controls are present and working on each device.
• Role-based access so regional IT teams can view and manage devices in their own areas.

Impact: Clearer Visibility and Practical Security Gains

With ThreatAware in place, Bird & Bird has moved from manual, fragmented reporting to real-time, unified visibility over its global IT estate and day-to-day cybersecurity asset management.

Windows 10 End-of-Life Migration with Confidence

During the Windows 10 end-of-life project, an export from SCCM suggested that all devices had been upgraded. ThreatAware showed a different picture, revealing machines that SCCM had missed because its agent was not working correctly.

Some devices were correctly visible in Intune, Azure AD and other tools and were running the firm’s endpoint protection, but they were not showing in SCCM at all. ThreatAware surfaced these exceptions immediately, allowing the team to tag them, raise alerts and make sure they were remediated or isolated where needed.

Stronger Cyber Insurance and Compliance Position

ThreatAware now provides cross-checked evidence that security tools are not only installed but actually working across devices. This helps the firm demonstrate to cyber insurers that controls are deployed and functioning across the estate.

For Cyber Essentials Plus recertification, the security team no longer needs to contact multiple IT teams for device counts or control status. ThreatAware brings this information into one place. Dan notes that for the latest Cyber Essentials Plus cycle, he did not need to chase other teams for data at all; the integrations in ThreatAware gave him everything required.

Operational Efficiency and Cost Savings

ThreatAware has also delivered very practical time savings. The security team no longer spends hours exporting from multiple systems and reconciling spreadsheets. Real-time alerts highlight missing agents, misconfigurations or end-of-life operating systems as they appear.

ThreatAware also exposed virtual machines that were assumed to be offline but were still running, helping avoid unnecessary infrastructure spend.