Valid. There are many ways to do it.

But for enterprise there may be teams, each developing their own way to do it. Then there will be many different ways that it is done throughout the enterprise, which is hard re: governance. Better/easier to adhere to an industry standard which can be audited, especially for enterprises where that is a legal requirement.

That isn't a reason you should use it, just an explanation about why someone has to use it.