Because it's better than nothing when independent organizations are reviewing systems or other organizations. It's like saying that penetration tests are useles

Because it's better than nothing when independent organizations are reviewing systems or other organizations. It's like saying that penetration tests are useless because you cannot prove security with testing.