The Legionella Control Cycle — why every business needs a proper risk assessment.

Legionella bacteria are a small but serious workplace risk. When they grow in building water systems and are inhaled in tiny droplets (for example from showers, cooling towers or decorative fountains), they can cause Legionnaires’ disease — a potentially severe pneumonia that can be fatal. For business owners, the single most important step for managing this risk is a robust legionella risk assessment followed by a formal control cycle (often called a water management program). This blog explains the control cycle, why an assessment matters, and how owners can act practically and legally to protect people and their business.

What is the “legionella control cycle”?

Think of the control cycle as a continuous loop of five core activities:

1. Identify — map all water systems and potential sources (hot/cold water systems, cooling towers, spa pools, humidifiers, decorative fountains, irrigation lines, etc.).

2. Assess — evaluate which parts of those systems could allow Legionella to grow or be aerosolised; prioritise risks based on likelihood and potential harm.

3. Control / Prevent — put in place measures to remove conditions that favour growth (temperature control, system cleaning, biocide/disinfectant regimes, flushing, removing dead-legs).

4. Monitor & Verify — check temperatures, disinfectant residuals, and system condition; carry out environmental testing when indicated; verify that controls are working.

5. Review & Record — update the legionella risk assessment and the plan after changes, incidents, or periodically; keep records of checks, actions and test results.

⸻

Why a formal risk assessment matters for business owners

Below are the most important reasons, legal, practical and financial — why businesses must invest in a proper legionella risk assessment.

1. It’s a legal / regulatory duty in many jurisdictions.

If you’re an employer or “person in control” of premises, health & safety regulators typically expect you to identify and manage legionella risks. Many countries’ guidance explicitly states that all relevant systems require a risk assessment and proportionate control measures. Failing to do so risks enforcement action and liability if an outbreak occurs.   

2. It turns general advice into a site-specific plan.

Generic rules (e.g., “keep hot water hot”) are useful, but a risk assessment translates that into practical actions tailored to your building’s layout, occupancy, and usage patterns. That avoids both under- and over-reacting, you target resources where the real risk is.

3. It protects health and reduces business risk.

A documented program reduces the chance of cases or outbreaks — protecting staff, customers and the public — and also shields the business from reputational damage, regulatory fines, legal claims, and costly emergency remediation. (Outbreak responses — decontamination, closure, investigations — are far more expensive than ongoing prevention.)

4. It creates defensible records.

If an incident occurs, having up-to-date assessments, a WMP, monitoring records and trained personnel demonstrates you took “reasonable precautions”, essential for regulatory and legal defence. Regulators look for evidence of assessment, control measures and records.   

What a good legionella risk assessment covers (practical checklist)

A competent assessor will typically:

• Map the water systems; draw a simple schematic: incoming mains, storage tanks, calorifiers, distribution loops, outlets, cooling towers, hot tubs, irrigation systems.

• Identify vulnerable points; low flow/stagnant areas, dead-legs, thermostatic mixing valves, complex distribution loops, decorative features or process water that produces aerosols.

• Record occupancy & usage patterns; seasonal closures, variable occupancy, vulnerable populations (elderly, immunocompromised) that increase risk.

• Check temperature regimes and disinfectant levels; hot water storage and circulation temperatures and cold water temperatures, and whether disinfectant residuals are maintained where appropriate. (Temperature control is a primary control strategy: Legionella grows best between ≈25–43°C).   

• Set control limits & monitoring frequency; e.g., weekly flushing of disused outlets, daily/weekly temperature checks, monthly disinfectant checks, and criteria that trigger intervention.

• Recommend remedial actions — cleaning, descaling, thermal or chemical disinfection, removing redundant outlets, automated monitoring upgrades.

• Specify responsibilities and training; who does checks, who responds to alarms, who keeps records and how staff are trained.

Implementation tips for busy business owners

• Get a competent and qualified risk assessor; businesses benefit from an accredited external assessor. Regulators often expect competence, not just a tick-box exercise.

• Prioritise simple, effective controls first- keeping hot water stored and circulated at recommended temperatures, avoiding stagnation by regular flushing, and routine cleaning of outlets and filters deliver large risk reductions.

• Review after changes — if you refurbish, change occupancy, add cooling towers, or experience long shutdowns (e.g., prolonged closure), update the assessment and take pre-opening flushing/cleaning measures.

When to sample and what testing tells you

Environmental testing for Legionella is a validation tool — it helps check whether controls are working, but it does not replace temperature, disinfectant and maintenance checks. Sampling strategy should be guided by your assessment and your local public health guidance (some settings have routine sampling; others sample only after failures or suspected exposure). Use test results combined with environmental data to tune the program.

For most business owners the single best investment is a properly scoped legionella risk assessment followed by a maintained water management program. It’s the difference between reacting to an emergency and preventing one.

Why Absolute Water Compliance should be your partner of choice.

While some businesses try to handle legionella compliance internally, most find that working with a dedicated specialist saves time, improves accuracy, and reduces legal risk. Absolute Water Compliance has built a reputation for delivering:

•     Legionella risk assessments that meet all UK Health & Safety Executive (HSE) requirements.

• Tailored water management programs aligned with your site’s systems, occupancy and operational realities.

• End-to-end service — from initial surveys, through remedial works, to ongoing monitoring and record-keeping support.

For business owners, partnering with a company like Absolute Water Compliance means you can focus on running your operation while knowing your legal obligations and public safety duties are met with precision.