certificate authority

Under what circumstances may an organisation decide to have ts own certification authority rather than purchasing certificates from a commercial CA and what are the implications?