Your physical site is the first line of defense against external contamination. An auditor will look for: