Understanding the final stage of a legionella risk assessment is essential for any organisation responsible for managing water systems. Whether you oversee a commercial premises, a healthcare facility, or a residential block, the concluding phase of the assessment process is what transforms a one-off evaluation into a sustainable, long-term water safety programme. Getting this right is not just good practice; it is a legal obligation under the Health and Safety at Work etc. Act 1974 and the Control of Substances Hazardous to Health Regulations 2002.
The process does not end when potential risks have been identified and control measures put in place. The true final step is establishing a robust framework for monitoring, documentation, and review that keeps those measures effective over time. Without this concluding phase, even the most thorough assessment loses its value as systems change, buildings evolve, and water conditions shift.
What is the Last Step in the Risk Assessment Process for Legionella?
The last step in a legionella risk assessment centres on consolidating all findings into a structured, actionable management plan. This means producing a comprehensive written report that captures every identified risk, every proposed control measure, and every monitoring obligation that the responsible person or duty holder must carry out going forward.
A professional assessor will document each water outlet, storage tank, distribution pipework run, and ancillary component within the system. Each element is classified according to its risk level, with corresponding control measures and inspection frequencies assigned clearly. This documentation serves two simultaneous purposes: it acts as a compliance record that can be produced during a Health and Safety Executive inspection, and it functions as a day-to-day operational guide for facilities managers and maintenance personnel.
Critically, the report must be written in a way that is both technically accurate and practically usable. A document that sits in a filing cabinet unread offers no protection to building occupants. The final step therefore includes ensuring that the responsible person fully understands the contents, knows which activities must be carried out and when, and has the competence or access to competent contractors to deliver them.
The monitoring schedule produced at this stage will typically specify water temperature checks, microbiological sampling frequencies, inspection intervals for components such as calorifiers, cooling towers, and showerheads, and the conditions under which an emergency review should be triggered. Responsibility must be assigned clearly for each task, with named individuals or contracted parties accountable for delivery and record-keeping.
Need a Risk Assessment? Speak with our Legionella Risk Assessment Team

What is the Last Stage of the Risk Assessment Process?
Once the written report is finalised, the practical work of the final step begins: embedding the monitoring regime into the day-to-day management of the building. This is where many organisations fall short. An assessment that produces a thorough report but fails to establish realistic, sustainable protocols offers only partial protection.
A well-structured monitoring framework will account for the specific characteristics of the water system, the nature of the premises, and the capacity of the team responsible for ongoing compliance. For a small commercial office, this might mean monthly temperature checks carried out by a trained member of facilities staff, with an annual independent review by a qualified assessor. For a large hospital or care home, the requirements will be considerably more intensive, reflecting the heightened vulnerability of the building’s occupants.
The table below sets out the standard monitoring activities, typical frequencies, and documentation requirements that form the backbone of a compliant legionella management programme following a completed risk assessment.
| Monitoring Activity | Typical Frequency | Responsible Party | Record Required |
|---|---|---|---|
| Hot water outlet temperature checks | Monthly | Facilities manager or trained staff | Temperature log |
| Cold water storage temperature checks | Monthly | Facilities manager or trained staff | Temperature log |
| Microbiological water sampling | Quarterly or as directed | Accredited laboratory | Laboratory certificate |
| Showerhead descale and disinfection | Quarterly | Qualified contractor or trained staff | Maintenance record |
| Full system inspection and risk assessment review | Annually or following system changes | Competent assessor | Updated assessment report |
| Cooling tower water treatment checks | Daily to weekly | Water treatment contractor | Treatment log |
Review intervals must also be built into the framework at the outset. The Health and Safety Executive’s Approved Code of Practice L8 states that assessments should be reviewed regularly and whenever there is reason to suspect the assessment is no longer valid. In practice, this means a formal annual review at minimum, with interim reviews triggered by significant changes such as new pipework installations, extended periods of low or zero building occupancy, or any confirmed or suspected case of Legionnaires’ disease linked to the premises.
Seasonal variation deserves particular attention during the establishment of the review schedule. Cold water systems are at increased risk during summer months when ambient temperatures rise; hot water systems may be compromised during periods of low demand. A competent assessor will factor these patterns into the monitoring calendar rather than applying a one-size-fits-all timetable throughout the year.
What is the Last Step for Risk Assessment?
Implementation of ongoing verification procedures represents the culminating activity in professional legionella risk assessment protocols. These procedures establish measurable benchmarks that demonstrate control measure effectiveness and provide early warning indicators for potential system failures.
The verification process includes regular temperature monitoring, water quality testing, and visual inspections of critical system components. Documentation of these activities creates an audit trail that demonstrates regulatory compliance whilst providing valuable data for future risk assessment updates.
What Steps Can You Take in Order to Manage the Risk of Legionella?
Effective legionella risk management requires a systematic approach that addresses both immediate hazards and long-term prevention strategies. The Health and Safety Executive provides detailed guidance on regulatory requirements and best practices for water system management.
Primary management steps include regular system cleaning, appropriate water temperature maintenance, and prompt attention to stagnant water conditions. These foundational activities must be supported by comprehensive record-keeping that tracks all maintenance activities, test results, and system modifications over time.
| Risk Management Activity | Frequency | Responsible Party | Documentation Required |
| Temperature monitoring | Monthly | Facilities manager | Temperature logs |
| Water quality testing | Quarterly | Certified laboratory | Test certificates |
| System cleaning | Annually | Qualified contractor | Cleaning records |
| Risk assessment review | Annually | Competent assessor | Updated assessment |
Regular training ensures that all personnel understand their responsibilities and can recognise early warning signs of potential legionella problems. The government’s guidance on water systems emphasises the importance of competency development for all staff involved in water system management.
| System Component | Monitoring Parameter | Target Range | Action Required |
| Hot water storage | Temperature | 60°C minimum | Weekly checks |
| Cold water storage | Temperature | Below 20°C | Monthly verification |
| Shower heads | Visual condition | Clean, no scale | Quarterly inspection |
| Cooling towers | Biocide levels | As specified | Daily monitoring |
Due for a Risk Assessment? Speak with our Legionella Assessment Team
Completing Your Legionella Risk Assessment Process
The final step in legionella risk assessment creates a foundation for sustained water safety management that protects building occupants and ensures regulatory compliance. This concluding phase transforms individual assessment findings into a comprehensive management system that adapts to changing circumstances and maintains effectiveness over time.
Successful completion requires careful integration of technical findings with practical management capabilities, ensuring that identified control measures remain both effective and sustainable. The documentation produced during this final step becomes the cornerstone of ongoing water safety management, providing clear guidance for routine operations and emergency responses.
The review and monitoring framework established in this final step must account for seasonal variations, system modifications, and changing occupancy patterns that can influence legionella risk levels. Regular reassessment ensures that control measures remain appropriate and effective as building conditions evolve.
Key takeaways from the legionella risk assessment process:
Frequently Asked Questions
How often should legionella risk assessments be reviewed and updated?
Legionella risk assessments should be reviewed annually as a minimum, with additional reviews required following significant system modifications or after any legionella incidents. More frequent reviews may be necessary for complex systems or high-risk environments.
Who is qualified to conduct the final review stage of legionella risk assessment?
The final review must be conducted by a competent person with appropriate training in legionella risk assessment, typically holding recognised qualifications such as City & Guilds or equivalent certification. This individual should have practical experience with water system management and current knowledge of regulatory requirements.
What documentation must be maintained following completion of legionella risk assessment?
Essential documentation includes the complete risk assessment report, monitoring records, maintenance logs, and evidence of staff training completion. These records must be readily accessible for inspection and should be retained for at least two years following system decommissioning.
Can legionella risk assessment conclusions change after the final step is completed?
Yes, risk assessment conclusions may change following system modifications, changes in building use, or identification of new risk factors during routine monitoring. The assessment remains a living document that evolves with changing circumstances.
What happens if monitoring reveals legionella contamination after assessment completion?
Detection of legionella requires immediate implementation of emergency protocols, including system shutdown if necessary, professional disinfection, and reassessment of control measures. The HSE incident reporting procedures must be followed for serious contamination events.
How do seasonal changes affect the final monitoring requirements?
Seasonal variations in water temperature and usage patterns may require adjusted monitoring frequencies, particularly for systems prone to stagnation during low-use periods. Summer months typically present higher risks due to elevated ambient temperatures affecting cold water systems.
What role does water temperature play in the final assessment conclusions?
Water temperature is a critical factor, with hot water systems requiring maintenance above 60°C and cold systems below 20°C to prevent legionella growth. Temperature monitoring forms a core component of ongoing verification procedures established in the final assessment step.
Are there specific requirements for high-risk premises during the final assessment stage?
High-risk premises such as healthcare facilities require enhanced monitoring protocols, more frequent reviews, and additional documentation to demonstrate compliance with sector-specific guidance. These requirements are detailed in HSE’s technical guidance documents.
How should legionella risk assessment findings be communicated to building users?
Assessment findings should be communicated through appropriate channels including staff briefings, written procedures, and emergency contact information display. Building users must understand their role in maintaining water safety and reporting potential problems.
What technological tools can support ongoing monitoring after assessment completion?
Modern monitoring systems include automated temperature logging, remote water quality sensors, and digital documentation platforms that streamline record-keeping. These tools enhance accuracy whilst reducing administrative burden on facility managers.
Can the final step requirements differ between commercial and residential properties?
While core principles remain consistent, commercial properties typically require more comprehensive documentation and monitoring due to regulatory obligations and higher occupancy levels. Residential assessments may have simplified requirements but must still address all identified risks.
What training requirements exist for staff involved in post-assessment monitoring?
Staff conducting monitoring activities must receive appropriate training covering sampling techniques, equipment operation, and emergency procedures. Training records must be maintained as part of the overall documentation requirements established in the final assessment step.
How does legionella risk assessment relate to broader health and safety management?
Legionella risk management integrates with overall health and safety policies, requiring coordination with other risk assessments and emergency procedures. According to Wikipedia’s comprehensive overview, legionella management forms part of broader occupational health responsibilities under current legislation.
What immediate actions are required if the final assessment identifies high-risk areas?
High-risk areas require immediate implementation of enhanced control measures, increased monitoring frequency, and potentially temporary system restrictions until risks are adequately controlled. Emergency action plans must be activated without delay to protect building occupants.

