The Health and Safety Executive's Approved Code of Practice L8 sets out what employers and people in control of premises must do to manage the risk from Legionella. In short, you must identify and assess sources of risk, prepare a scheme to prevent or control that risk, put the scheme into practice, keep records, and appoint a competent person to take day-to-day responsibility. The risk assessment is the first step, and everything else is built on it.
A useful assessment is specific to your building. It should describe your water system clearly enough that someone new could understand it, identify every area where water can stagnate or sit at the wrong temperature, and say plainly what needs to happen next. If your current assessment is a few pages of generic text that could apply to any building, it is unlikely to protect you.
For buildings in Luton, Dunstable, St Albans and across Bedfordshire and Hertfordshire, potential issues include: pipework left behind after office refits, storage tanks sized for a building that is now half-occupied, changing rooms at golf clubs that are busy at weekends and silent during the week, and school systems that sit unused through the summer holidays. A good assessment picks these up and explains how to deal with them.
Once your assessment is complete, the next steps are usually a written scheme of control, a monitoring programme and any remedial works. We can handle all of these, so the recommendations in your report become real changes in your building rather than a list that is never acted on.