A security doesn't require a common enterprise, it simply requires that one thing represents an interest in something else. The underlying asset is usually financial or intangible in nature, but that isn't required. There are more specific rules and exceptions, but those vary by jurisdiction.