GUIDE: Healthy Buildings Legionella and Water Management
Legionella and Water Management in Healthy Buildings: A Complete Step-by-Step Guide
Legionella bacteria in building water systems cause Legionnaires’ disease, a potentially fatal form of pneumonia. Building operators, facilities managers, and healthy buildings practitioners who understand how to develop, implement, and maintain a Water Management Plan under ASHRAE Standard 188 and CDC guidance can prevent outbreaks before they occur. This guide walks through every step of the process.
Quick Overview
What This Guide Covers
Building a Legionella Water Management Plan from system inventory to monitoring, testing, corrective action, and program maintenance under ASHRAE 188 and CDC guidelines.
Who This Is For
Facilities managers, building operators, EHS professionals, healthy buildings practitioners, property managers, and anyone responsible for building water system safety.
Time to Implement
Initial WMP development: 4 to 8 weeks. Ongoing monitoring: weekly to quarterly depending on system risk profile. Annual full program review.
Primary Standards
ASHRAE Standard 188-2021, CDC Water Management Program Toolkit, EPA Lead and Copper Rule, CMS Survey and Certification Letter 17-30.
What You Will Learn
How to conduct a building water system inventory and create a schematic
How to identify Legionella hazard conditions and assign control measures
How to set monitoring frequencies and document results
How to implement and verify temperature control for hot and cold water systems
How to establish and respond to corrective action triggers
How to manage cooling towers and decorative water features separately
How to handle building vacancy, reoccupancy, and post-shutdown flushing
How to review and update your WMP annually and after incidents
Prerequisites
Before beginning WMP development, confirm the following are in place. A WMP built without this foundation will have gaps that undermine its effectiveness.
Management Authorization
Written authorization from building ownership or management to develop and implement a WMP. ASHRAE 188 requires documented management commitment including a designated WMP team.
Access to Building Plans
As-built drawings of the plumbing system, HVAC system (including cooling towers), and any water-using equipment. If drawings are unavailable, a physical survey must substitute.
Designated WMP Team
At minimum: a team leader responsible for the WMP, a facilities representative who knows the systems, and an external water treatment specialist or industrial hygienist for validation.
Testing Laboratory Identified
A laboratory accredited for Legionella culture testing (ISO 17025 or equivalent) must be identified before monitoring begins. Turnaround time expectations and sample handling protocols confirmed in advance.
Required Documents and Equipment
Source: ASHRAE | ASHRAE Standard 188-2021
Step-by-Step Instructions
1
Conduct a Complete Building Water System Inventory
Objective
Create a complete written and visual record of every water system component in the building that could harbor or amplify Legionella.
Why It Matters
You cannot manage risk you have not mapped. ASHRAE 188 requires a documented system description as the first element of every WMP. Inventory gaps become Legionella outbreak origins.
Actions
Walk every mechanical space, roof, and utility area. Document: all water heaters and storage tanks, all cooling towers and evaporative condensers, all hot and cold water distribution lines, all points of use (sinks, showers, drinking fountains, ice machines, eye wash stations, hose bibs), decorative fountains and water features, and any dead legs or infrequently used sections.
Expected Outcome
A complete flow schematic or written inventory that identifies every component where water is stored, heated, cooled, or delivered to occupants, with dead legs and low-use outlets specifically flagged.
Tip
Use color coding on the schematic: blue for cold water, red for hot, orange for recirculation return lines. Mark dead legs with a distinct symbol. This visual makes hazard identification in Step 2 much faster.
2
Identify Hazard Conditions and Assign Control Measures
Objective
For each system component, identify which Legionella hazard conditions are present and specify the control measure that will be applied to each.
Why It Matters
Legionella grows under specific conditions: temperatures between 25 and 45 degrees C, stagnant water, scale and sediment, biofilm, and nutrients from organic material. A WMP without hazard-specific controls is a document, not a program.
Actions
For each component on your inventory, assess: Is water temperature in the 25 to 45 degree C growth range at any point? Is there stagnation risk? Is there scale, sediment, or biofilm? Then assign a specific control measure to each identified hazard condition, including the method, the frequency, and the person responsible.
Expected Outcome
A hazard analysis table listing each system component, the hazard conditions present, the assigned control measure, the monitoring method, and the responsible party.
Warning
Do not list a control measure you cannot actually implement and monitor. A WMP with aspirational controls that are never executed provides no protection and creates documentation of awareness without action, which increases liability.
3
Establish Control Limits and Corrective Action Triggers
Objective
Define the specific numerical limits for each control parameter and specify exactly what action must be taken when a limit is exceeded.
Why It Matters
Without predefined limits and corrective actions, monitoring data has no meaning. A reading outside a limit that triggers no response is the same as not measuring. Corrective actions must be defined before they are needed, not improvised after a positive Legionella result.
Standard Control Limits
Hot water at heater: at or above 60 degrees C. Hot water at all outlets: at or above 51 degrees C. Cold water throughout distribution: below 20 degrees C. Free chlorine residual at outlets: at or above 0.2 mg/L. Total chlorine: at or above 0.5 mg/L. Cooling tower conductivity, biocide residual, and pH: per water treatment provider specification.
Expected Outcome
A documented control limit table with limit values, monitoring method, monitoring frequency, corrective action when exceeded, and follow-up verification requirement.
Source: CDC | Legionella Water Management Programs
4
Implement and Verify Temperature Control
Objective
Ensure hot water is stored at temperatures that kill Legionella and delivered at temperatures that prevent growth at every outlet in the building.
Why It Matters
Temperature is the most reliable, continuously operating Legionella control available. A water heater set to 60 degrees C but delivering 40-degree water at a distant outlet due to heat loss is not in compliance and creates a high-risk growth environment for every occupant who uses that outlet.
Actions
Set all water heaters to maintain stored water at or above 60 degrees C. Verify hot water recirculation loops return at or above 51 degrees C. Select a representative set of sentinel taps (furthest outlets, lowest-use outlets, outlets serving high-risk populations) and measure their hot water delivery temperature weekly. Measure cold water temperatures at storage and at remote outlets quarterly.
Expected Outcome
Documented temperature readings at all sentinel taps and recirculation returns showing compliance with limits. A corrective action record for any out-of-limit reading.
Tip
Thermostatic mixing valves (TMVs) are installed at point of use to prevent scalding by blending hot and cold water. They are essential for safety but create a local low-temperature zone. The hot water supply to the TMV must still meet the 51 degree C delivery requirement upstream of the valve.
5
Monitor Disinfectant Residuals and Implement Flushing
Objective
Verify that municipal disinfectant residuals are maintained throughout the building distribution system and that low-use outlets are flushed on a defined schedule to prevent stagnation.
Why It Matters
Disinfectant residuals dissipate as water travels through building plumbing. Stagnant water in low-use outlets, dead legs, and vacant floors loses residual completely, enabling Legionella to colonize from background levels to outbreak concentrations.
Actions
Test free chlorine or chloramine residual at sentinel taps monthly. Establish a flushing schedule for all low-use outlets: flush weekly for outlets used fewer than 3 times per week. Flush the entire system before reoccupancy after any extended vacancy period (7 or more days). Document the date, time, outlet, duration, and pre/post residual for each flushing event.
Expected Outcome
Monthly residual monitoring records for all sentinel taps. A completed flushing log with all required fields for every low-use outlet on the schedule.
6
Conduct Legionella Culture Testing
Objective
Conduct Legionella culture testing at defined system locations on a frequency that reflects the risk profile of each component, and respond to results using predefined corrective action procedures.
Why It Matters
Temperature and disinfectant monitoring confirm control conditions exist. Culture testing confirms the control is actually working. A positive Legionella result in the absence of symptoms is your opportunity to respond before someone becomes ill. A positive result after occupants are sick is a crisis.
Actions
Collect samples from: cooling tower basin, hot water heater outlet, recirculation loop return, furthest hot water outlets, cold water storage if applicable, and any decorative water features. Follow laboratory sample collection protocol exactly. For positive results: interpret using the action level thresholds in your WMP (typically 1 to 10 CFU/mL triggers increased monitoring; above 10 CFU/mL triggers remediation). Notify your water treatment provider immediately on positive results above your action level.
Expected Outcome
Completed chain of custody forms, laboratory reports for all samples, and a documented response record for any sample above the action level.
Warning
A negative Legionella culture result does not mean the system is free of Legionella. It means the sample collected at that location at that time did not show detectable growth. Culture testing has inherent sensitivity limits. Negative results confirm controls are working but do not replace ongoing monitoring.
Source: CDC | Legionella Water Management Programs
7
Manage Cooling Towers and Decorative Water Features
Objective
Apply dedicated management programs to cooling towers and decorative water features, which generate aerosols and represent the highest Legionella transmission risk in building water systems.
Why It Matters
Most documented Legionnaires’ disease outbreaks are traced to cooling towers. They generate large volumes of fine aerosol droplets that can carry Legionella directly into building air intakes and to people standing within the drift plume range. A single poorly maintained cooling tower can affect dozens of people in a large building or multiple buildings downwind.
Actions
For cooling towers: physical cleaning and disinfection at startup, shutdown, and at minimum twice per year. Continuous or intermittent biocide treatment with documented efficacy. Weekly measurement of biocide residual, pH, and conductivity. Drift eliminators maintained in place and undamaged. Legionella culture testing at least quarterly. Startup procedure includes hyperchlorination before putting the system back into service after any shutdown period.
Expected Outcome
Completed cooling tower maintenance log with all chemical treatment, cleaning, and inspection records. Culture test results. Startup and shutdown procedure checklists.
8
Review, Update, and Audit Your WMP Annually
Objective
Conduct an annual review of the entire WMP to verify it reflects current building conditions, personnel, and system configuration, and update it whenever significant changes occur.
Why It Matters
A WMP written for a building as it existed three years ago may not address the cooling tower added during last year’s renovation, the new floor added to occupancy, or the plumbing reconfiguration that created new dead legs. An outdated WMP provides false assurance.
Actions
Review the water system inventory against current building configuration. Verify all WMP team members and their responsibilities are current. Review the full year of monitoring records for trends or gaps. Update control limits if water treatment program or system configuration has changed. Trigger an out-of-cycle review after any Legionella case linked to the building, after any significant plumbing modification, and after any extended vacancy and reoccupancy.
Expected Outcome
A dated annual review record signed by the WMP team leader. An updated WMP document with version control notation. Any corrective actions from the review documented and assigned.
Source: ASHRAE | ASHRAE Standard 188 Legionellosis Risk Management
Best Practices
Engage a Water Treatment Specialist
A qualified water treatment specialist or industrial hygienist with Legionella program experience should validate your WMP at inception and following any major update. Internal staff can execute the program but external validation catches gaps that familiarity with the building creates.
Train Everyone Who Touches the Program
Every person who collects monitoring data, performs flushing, or records WMP documentation must be trained on the specific procedures they are executing. Untrained staff following general procedures rather than the WMP-specific protocol is a common audit finding and a real risk factor.
Keep Records Permanently Accessible
If a Legionella case is linked to your building, regulators and legal counsel will request all WMP documentation. Records must be complete, legible, and retrievable. Digital records with backup are preferable to paper logs that may be lost or damaged.
Common Mistakes
Compliance Notes
ASHRAE Standard 188 applies to buildings above defined thresholds: at minimum, buildings with cooling towers, healthcare facilities, and buildings with complex water systems. Many state and local health departments now require ASHRAE 188-compliant WMPs for healthcare, lodging, and multi-tenant commercial buildings. CMS Survey and Certification Letter 17-30 requires Medicare and Medicaid-certified healthcare facilities to have a WMP that meets ASHRAE 188 or equivalent standards. Failure to have a WMP in place when a Legionella case is linked to a facility is treated as evidence of negligence in both regulatory and civil proceedings.
OSHA’s General Duty Clause applies to employer-controlled buildings where Legionella is a recognized hazard. Employers who operate cooling towers, large hot water systems, or decorative water features and have not implemented a WMP have documented awareness of a recognized hazard without a feasible abatement, which satisfies the GDC’s four-element test for citation.
Troubleshooting
Hot water temperature below 51 degrees C at distant outlets
Check recirculation loop pump operation and flow rate. Inspect for heat loss along uninsulated sections of distribution piping. Verify recirculation return temperature meets the 51-degree minimum. In older buildings, pipe insulation may need to be upgraded.
Low disinfectant residual at points of use
Residual loss typically indicates biofilm in the pipes consuming chlorine faster than it is replenished. Increase flushing frequency for affected outlets. Consider supplemental point-of-entry or point-of-use treatment. Notify your water treatment provider and review the plumbing condition in affected sections.
Positive Legionella culture result
Execute the predefined corrective action in your WMP immediately. Notify your water treatment provider. If above the remediation threshold, implement superheating, hyperchlorination, or both per your WMP. Retest within 2 weeks of completing remediation. If any occupant has reported respiratory illness, notify public health immediately regardless of culture level.
Quick Checklist
Program Foundation
Written WMP document completed and dated
WMP team designated with named responsible parties
Complete water system inventory and schematic
Hazard analysis table with control measures assigned
Corrective action procedures written and accessible
Ongoing Monitoring
Weekly temperature checks at sentinel taps
Weekly flushing of all low-use outlets
Monthly disinfectant residual measurements at outlets
Quarterly Legionella culture testing at defined locations
Cooling tower parameters tested and logged weekly
Documentation
All monitoring results recorded with date, location, and result
All corrective actions documented with resolution confirmed
Laboratory reports and chain of custody forms retained
Annual WMP review completed and documented
Staff training records maintained for all WMP personnel
Key Takeaways
A WMP Is an Operational Program, Not a Document
Writing a WMP and executing a WMP are different things. The document has no protective value if monitoring is not conducted, results are not reviewed, and corrective actions are not taken. ASHRAE 188 compliance requires both the written plan and the executed program with records to prove it.
Temperature Control Is Your Most Reliable Defense
Maintaining hot water at or above 60 degrees C at the heater and 51 degrees C at all outlets continuously kills Legionella without requiring chemical intervention. It operates 24 hours per day. Every deviation from these temperatures is a window of risk. Temperature monitoring must cover the full distribution system, not just the heater.
Act on Positive Results Before Someone Gets Sick
A positive Legionella culture result in a routine monitoring sample is the system working as intended: it detected a problem before anyone was harmed. Organizations that respond to positive results with documented corrective action and follow-up testing demonstrate the program is functioning. Organizations that ignore positive results face the worst possible outcome: a preventable outbreak with documentation showing they knew.
Frequently Asked Questions
Does every building need a Water Management Plan under ASHRAE 188?
ASHRAE 188 applies when a building meets one or more specified criteria: the presence of a cooling tower or evaporative condenser, classification as a healthcare facility, or a building with complex water systems above defined thresholds. Many mid-size and large commercial buildings, hotels, and healthcare facilities fall within scope. Even buildings below the ASHRAE 188 threshold should implement basic Legionella controls, as the General Duty Clause applies to any employer-controlled building where Legionella is a recognized hazard.
How often should Legionella culture testing be conducted?
ASHRAE 188 does not specify a universal testing frequency; it requires that the WMP define appropriate frequencies based on the risk profile of each system component. In practice, most validated programs test cooling towers quarterly, hot water systems at least annually with quarterly testing for high-risk systems (healthcare, large hotel), and more frequently following corrective actions or system modifications. The CDC Water Management Program Toolkit provides guidance on setting risk-based testing schedules.
What should we do if we find Legionella in our water system?
Execute your predefined corrective action procedure immediately. This typically includes: notifying your water treatment provider, implementing the remediation method specified in your WMP (superheating, hyperchlorination, or both depending on system type and level), retesting within 2 weeks of completing remediation, and reviewing how the condition arose to prevent recurrence. If any building occupant has reported respiratory illness symptoms consistent with Legionnaires’ disease during the period when Legionella was present, notify your local public health department immediately regardless of culture concentration.
Can we manage a Legionella WMP in-house without a water treatment specialist?
The day-to-day execution of monitoring, flushing, and documentation can be performed by trained in-house staff. However, ASHRAE 188 requires that the WMP be developed by a team with competency in Legionella risk management, and initial development and annual validation should involve a qualified water treatment specialist or industrial hygienist. The consequences of a WMP gap that allows a Legionella outbreak are severe enough that external expert involvement in program design and review is strongly recommended regardless of building size.
Government and Regulatory Sources
- CDC – Legionella Water Management Programs
- CDC – Legionellosis Surveillance and Prevention
- ASHRAE – Standard 188-2021 Legionellosis Risk Management for Building Water Systems
- OSHA – Legionnaires Disease Prevention
- EPA – Drinking Water Safety and Regulations
Related VelSafe Articles
- Assessing Drinking Water in Healthy Buildings: 7 Tips
- Healthy Buildings Suite: Practice Test and Review
- Indoor Air Quality Law: Employer Compliance Guide
Start Your WMP Before You Need It
Legionella outbreaks do not announce themselves in advance. The building operators who avoid them are the ones who built systematic programs before a case occurred, not the ones who responded fastest after. A Water Management Plan developed and executed under ASHRAE 188 gives your building the systematic defenses that regulatory compliance, occupant health, and legal protection all require. Use the eight steps in this guide to build yours, execute every monitoring task on schedule, and keep the records that demonstrate the program is running as designed. Find more healthy buildings water safety resources at velsafe.com.