Security monitoring solutions have been established in the financial world for quite some time - driven by the high need for protection of the data of bank customers and insurants and the resulting high regulatory requirements. Threat modeling is an essential component in the connection of a company's system landscape to the SIEM. But what challenges do our customers face? Is threat modeling even necessary? What are the implementation approaches? We want to answer these questions!