Why - Audit requirement!
Why not - see above.
Whats the value - see above, also, this is part of our audited SoX process.
Who - Reliable third party, last one I had done was from IBM.

Cheers: