The CFATS rules have nothing to do with “where” a facility is located; they only address on-site security. Look it up for yourself, you DA.