Flooding can be caused by both internal and external sources and the impact can be significant, particularly if the water is contaminated, in which case equipment may be damaged beyond repair. Water detection systems should be installed and where possible, water supplies should be routed away from IT equipment. Care should also be given to the siting of IT equipment so that it is protected from local hazards, such as being below ground level in an area prone to flooding. Computer Audit Involvement in Physical Security In considering physical security, the computer auditor should be aware that in some areas this can be a specialist field. In these circumstances,