Beyond the fact that you’re required to have FIM in place for various compliance drivers such as PCI-DSS, your system security is significantly weaker if you can’t readily identify and deal with IT security threats.
Without FIM you’re vulnerable to external threats such as malware as well as unknown, internally made changes, which can compromise your security posture.