To advertise the company's security posture and capabilities to potential clients and customers

To serve as a replacement for annual external audits by providing a sufficient level of assurance

To increase transparency with external stakeholders and the public regarding internal security practices

To document findings and actions taken, which supports the accountability and effectiveness of the audits