In the last years it has been more and more important to have web enable business systems. User only wants to have one app or web browser and don't have a clue which or how many systems you actually are logged on to. Of course the system must also be accessible from internet and this result in allot of security issues.
Which company really wants to have their business critical system accessible from internet? Is your company even allowed to have business critical data accessible from the internet?