Inverted Security and ROI
The data are often not application-specific
Appropriate rules apply for each entity and circumstance
By placing security on the data, we are able to expose the same data through different business apps, for different purposes