Because you think it is important that your security is set up as a fully-fledged business process and the control measures associated with your security are efficient and effective