Legionella Risk Assessment PPM Services for RTM Boards – L8 ACoP Compliance & Water Safety

Your RTM board should check that the legionella risk assessment has been turned into a live control regime.

That is the real dividing line between paperwork and protection. An assessment can be current, neatly filed, and technically sound, yet still leave your block exposed if nobody has translated it into tasks, ownership, review points, and usable records. HSE guidance, ACoP L8, and HSG274 Part 2 all point to the same practical truth: the assessment starts the process. It does not complete it.

For your board, the useful test is simple. Can you see what the assessment changes this week, this month, and this quarter? If the answer is vague, the building may be relying on assumptions rather than control. That tends to surface during renewal discussions, resident complaints, contractor handovers, or when a new director asks a basic question and nobody can answer quickly.

A risk assessment only earns its keep when it changes what your building team actually does.

A stronger approach is to read the assessment as the top sheet of an operating system. Your board should be able to trace a straight line from identified risk to task schedule, from task schedule to completed records, and from exceptions to closure evidence. That is what makes communal water risk governable rather than theoretical.

What should the written scheme give your RTM board in practice?

Your written scheme should give your board a working map of control, not a vague promise that checks happen.

In plain English, the written scheme is the document that says what gets checked, how often, by whom, what counts as acceptable, and what happens when results fall outside tolerance. If the assessment identifies the risk, the written scheme tells the building how to manage it.

A board-ready written scheme should show:

• which communal water assets and outlets are in scope
• what monitoring or flushing tasks apply
• the required frequency for each task
• the acceptable temperature or operating parameters
• the escalation route for failed or unusual results
• who performs each task
• who reviews exceptions
• where evidence is stored

That level of detail matters because RTM governance changes hands. Directors rotate. Managing agents change. Contractors come and go. If the regime only works while one person remembers how it operates, your control is weaker than it looks.

The RICS Residential Management Code supports the broader principle here: directors do not need to carry out specialist technical work, but they do need enough structure to oversee it properly. That means your board should be able to ask for a plain-English status summary without waiting for somebody to decode a contractor report.

Which questions should your board be able to answer at the next meeting?

Your board should be able to answer five control questions without searching through scattered files.

That is usually the fastest way to judge whether the building is genuinely in control or merely busy. If your managing agent, internal lead, or contractor cannot provide these answers cleanly, the issue is not necessarily that you have a legionella incident. The issue is that you may not be able to prove active management.

A practical way to tighten this without creating extra board admin is to run a one-block compliance diagnostic against the existing assessment, written scheme, and records. That usually shows very quickly whether your provider has given you a usable regime or just a report. If your board wants confidence before renewal, resident challenge, or director turnover, that is often the lowest-friction next step.

You should review legionella controls whenever building use or water-system behaviour changes in a way that affects stagnation or temperature control.

That matters because communal water risk does not sit still just because the annual assessment is still in date. HSG274 Part 2 and wider HSE guidance both support a reasoned review approach. If the assumptions behind the last assessment no longer reflect the building, your board should not keep relying on old conclusions as if nothing has changed.

This catches many RTM RMC boards out. The compliance cycle looks intact on paper, but the building itself has shifted. Flats may be empty for long periods. Shared facilities may see less use. Pipework may have been altered during refurbishment. Plant may have been replaced. A previously accurate assessment can become less useful if occupancy, circulation, or temperature behaviour has changed underneath it.

For your board, the governance question is not whether the report still looks formal. It is whether the control regime still matches the building you are actually running.

Which changes should trigger a review rather than waiting for the next annual cycle?

Your board should treat certain changes as immediate review points, not background noise.

The most common triggers are:

• long void periods or sustained low occupancy
• temporary shutdowns or interrupted supply
• communal showers or little-used outlets dropping out of routine use
• calorifier, pump, valve, or pipework changes
• newly identified dead legs or redundant outlets
• repeated failed temperatures
• complaints about irregular hot or cold water performance
• refurbishment works affecting distribution routes

The useful test is not whether a change feels dramatic. It is whether the previous assessment assumed a different pattern of use or a different system condition. If it did, the old control model may no longer be reliable.

Buildings change quietly. Good boards review the regime before the paperwork starts lying.

The Building Safety Act 2022 also sharpens the wider governance expectation for higher-risk buildings: when building conditions change, records and oversight need to keep pace. Legionella control sits inside that same discipline of active, evidenced management.

What kind of review is proportionate for your block?

Not every change needs a full reassessment of the whole system.

A smaller operational review may be enough where the issue is narrow: one low-use outlet, one short void period, one temporary service disruption. In that case, your board may only need an updated outlet list, temporary flushing changes, a short review note, and revised monitoring frequency.

A targeted reassessment is more sensible where one area of the building has materially changed, such as a refurbished riser, plant replacement, or a changed communal facility. Then you usually need the affected area reassessed properly, the asset list corrected, and the written scheme updated so the task plan reflects reality.

A wider reassessment becomes the better option when multiple risk factors overlap: prolonged under-occupation, repeated failed readings, system changes, contractor turnover, and patchy historic records. At that point, patching the old regime often takes more effort than rebuilding control cleanly.

How can your board test whether the old regime still fits?

A practical board review can run through five direct questions:

1. Has building use changed?
2. Has the water system changed?
3. Do the current task frequencies still make sense?
4. Do the records still describe the building accurately?
5. Has anyone updated the written scheme to reflect those changes?

Those questions help your board avoid the false choice between doing nothing and commissioning a full building-wide reassessment every time. In many blocks, the right commercial decision sits in the middle.

Imagine a block with several empty flats over winter, reduced communal use, and a refurbished riser. The annual assessment is still technically current. Yet the old flushing assumptions no longer fit usage, the outlet map no longer matches the system, and the live task routine still follows the old setup. That is how a current report can still leave your board with stale control.

If your board wants a clean answer before renewal, handover, or resident challenge, a targeted diagnostic against changed assumptions is usually the fastest route. It gives you a reasoned basis for either confirming the regime still works or tightening it before small drift turns into expensive uncertainty.

Your RTM board should keep internal oversight visible while assigning contractors clear technical ownership and evidence duties.

That split matters because ambiguity is where control starts to fray. In many blocks, the contractor assumes they were hired to complete technical tasks only. The managing agent assumes the contractor will also drive every follow-on action. The board assumes the managing agent is holding the whole chain together. That is how failed readings, overdue remedials, and vague reporting end up sitting between roles instead of inside them.

The practical goal is not to make directors into water hygiene specialists. It is to make sure one internal person, supported by a deputy or managing agent, owns the oversight function. That person is not there to take temperatures or flush outlets personally. They are there to ensure the regime stays live, exceptions are reviewed, records remain centralised, and the board gets a clear status picture.

Who should your board appoint internally?

Your board should appoint one named internal lead for oversight and one fallback contact.

For most RTM companies, that means a director lead supported by the managing agent or block administrator. The lead should be responsible for:

• checking the assessment and written scheme remain current
• confirming tasks are scheduled and completed
• escalating failed results and overdue actions
• reviewing whether records are usable
• reporting status to the board in plain language
• keeping ownership visible during board or agent changes

That internal ownership is what stops the regime from living in scattered emails or one contractor’s reporting format. It also makes handover between directors much cleaner.

The RICS Residential Management Code supports the discipline of defined roles, retrievable records, and clear management arrangements. In practical terms, that means your board should be able to say who oversees the regime without hesitation.

Which tasks should contractors own without confusion?

Contractors should own the technical tasks they are appointed to deliver, plus the evidence needed to prove delivery.

A clean ownership model usually looks like this:

The word usable matters. A contractor who sends technical outputs that a board cannot interpret is solving only half the problem. Your board needs evidence that can move directly into a board pack, insurer file, or lender review without a translation exercise every month.

When does the ownership model usually break down?

It usually breaks down when attendance gets mistaken for closure.

That is the recurring failure pattern. A contractor notes an exception in a report. No one internally checks whether it was acted on. The same issue appears on the next visit. Six months later, your file shows regular attendance but no visible control of the repeating problem.

Another common weakness is scope drift. The contractor thinks they were hired to assess and monitor. The board thinks they will also connect remedials, tracker updates, and reporting. Neither assumption gets written down, so the block ends up paying for technical work while the board still carries the burden of joining the dots.

A simple escalation list can reduce that risk immediately. Your board should know:

• who reviews failed readings
• who raises remedial instructions
• who signs off closure
• who updates the tracker
• who tells the board if the same issue repeats

That structure reduces hidden board labour. It also makes a stronger commercial case for an integrated compliance and property maintenance model where assessment, remedials, evidence handling, and reporting connect properly. If your current setup leaves directors doing unpaid coordination work, a one-block governance review or action-tracker audit is often the quickest way to see whether the problem is contractor quality, scope design, or weak internal oversight.

The strongest assurance records show a clear chain from assessment to control to action to verified closure.

That is what most reviewers are really looking for. Insurers, lenders, valuers, and incoming directors rarely want more documents for the sake of it. They want fewer doubts. A strong file lets them see that your RTM company identified the risk, ran the regime, dealt with exceptions, and kept proof in a way that survives scrutiny.

Weak files often look busy but disconnected. You may have an assessment, a few monitoring sheets, old service reports, and a trail of emails about follow-up works. There is activity, but no obvious control story. A strong assurance pack removes that ambiguity. It helps a new director, broker, or valuer understand the building without needing a guided explanation.

Which record sequence makes the building easiest to trust?

The most credible sequence follows the way a reviewer naturally thinks.

Start with the current legionella risk assessment. Then show the written scheme of control, the asset or outlet list, and the monitoring and flushing records that sit behind it. After that, show exception handling, remedial actions, and closure evidence. If the file jumps straight from assessment to random logs, the chain feels weaker because the operating logic is missing.

A practical sequence looks like this:

• current risk assessment with scope and review point
• written scheme of control
• live asset or outlet list
• monitoring and flushing records where required
• service and inspection reports
• remedial tracker with due dates and owners
• proof of completed works
• archived versions and filing logic

That order matters because it answers the unspoken question behind most external reviews: can this board show that it knew what needed doing and made sure it happened?

Which records matter most to each stakeholder?

Different reviewers focus on different parts of the same evidence chain.

The Building Safety Act 2022 reinforces the wider importance of disciplined, retrievable records in buildings with higher-risk governance demands. Even where your block is not in that category, the management principle is still useful: if records are hard to retrieve, hard to interpret, or obviously fragmented, confidence falls quickly.

How should your board file the material so it is usable later?

Your records should be filed by building, then by risk area, then by document type and date.

That usually works far better than filing by contractor name or invoice date, because external reviewers do not think in supplier batches. They think in building risk and management continuity.

A practical filing structure might look like this:

• Building
• Water hygiene
• Assessment
• Written scheme
• Monitoring
• Flushing
• Servicing
• Remedials
• Closure evidence
• Board summaries

That structure makes life easier during board turnover, insurance renewal, refinance preparation, resident challenge, or legal review. It also reduces the hidden cost of last-minute evidence recovery.

If your current material is spread across old contractor portals, inboxes, and scattered PDFs, the fix is rarely “collect more documents.” The fix is to rebuild the evidence logic. A binder review, tracker rebuild, or insurer-readiness pack can often do more for assurance than another standalone report. If your board wants the building to look controlled to outsiders, the file should make the story obvious without explanation.

A useful legionella provider leaves your board with cleaner control, clearer exceptions, and records that support decisions without extra decoding.

That is the standard that matters. A provider can attend on time, issue reports promptly, and still leave your board with a weak operating result if the output is generic, exceptions are buried, remedials are disconnected, and nobody links findings to assurance reporting. In that situation, you are buying site activity, not reliable control.

Boards usually feel the weakness when scrutiny arrives. A broker asks for evidence of active management. A new director tries to understand the file. A resident raises a concern. A lender review exposes weak continuity. The real question then is not whether work was done. It is whether the building is easier to govern because that work was done.

A provider earns trust when your board can see the status quickly, not when the report simply arrives on time.

Which signs usually point to a stronger provider?

A stronger provider tends to make the building easier to understand and easier to manage.

That usually shows up in practical ways:

• reports describe your actual block rather than repeating template wording
• exceptions are clearly flagged and ranked
• next actions are stated with dates or triggers
• remedials are connected to findings rather than left floating
• records are delivered in a format that fits board and insurer use
• technical outputs can be explained in plain English when needed

This matters commercially because it reduces hidden management cost. Your board and managing agent should not need to spend unpaid time translating technical attendance into governance clarity.

Which warning signs suggest the service is only being serviced, not managed?

The weaker pattern is usually visible in the reporting style and the handoff points.

Watch for:

• generic reports with minimal building-specific context
• repeated failed or unusual results without a clear escalation path
• remedials that sit outside scope with no managed interface
• records arriving in inconsistent formats
• no live action tracker linking visits to closure
• a board file that still requires verbal explanation every time

That kind of service can look professional while still exporting uncertainty back to your team.

A simple review of the last three months usually tells you enough. Ask whether a new director could answer these questions from the file alone:

1. What was checked?
2. What was found?
3. What remains open?
4. What needs deciding next?

If those answers are hard to see, the provider may be technically active but operationally weak.

How should your board judge value without defaulting to price only?

The right test is not whether the provider is cheap. It is whether the provider reduces board labour and governance uncertainty.

That is the hidden commercial issue. Lower-fee service models can look attractive while pushing more coordination work back onto directors or managing agents. Your team then spends time connecting visits, findings, remedials, and assurance packs that a stronger provider would have aligned from the outset.

The Housing Ombudsman’s wider complaint-handling expectations are useful in the background here, especially where poor contractor coordination spills into resident dissatisfaction. A provider that creates repeated confusion rarely stays contained within technical compliance. It usually leaks into complaints, confidence, and trust.

If your board suspects the current model is creating attendance without real control, the best first step is often a provider review or action-tracker audit rather than a dramatic retender. That can show whether the problem sits in reporting quality, remedial interface, record handling, or scope design. If your board wants a safer decision before renewal, handover, or challenge, that kind of diagnostic gives you a clearer answer than another cycle of generic visits.

A risk-based PPM programme usually gives your RTM board better value because it reduces stagnation drift, repeat visits, emergency spend, and evidence recovery time.

That is the real cost comparison. Many boards compare only the visible invoice line and miss the wider control cost. Ad hoc testing and reactive attendance can look cheaper in the short term, but they often create more spend through repeat call-outs, delayed remedials, resident disruption, board chasing, and last-minute insurer or lender evidence hunts.

A risk-based PPM model changes that by linking communal water control to actual building risk. Instead of relying on occasional visits and fragmented decision-making, it creates a routine around the outlets, assets, and monitoring points that matter most in your block. That gives your board earlier warning, cleaner prioritisation, and a much easier assurance story.

Where does the value show up first in legionella control?

The first savings usually appear in discipline, not drama.

A risk-based model typically delivers:

• fewer missed monitoring or flushing tasks
• earlier visibility on low-use outlets and drift
• fewer repeat visits for the same issue
• faster response when insurers, lenders, or directors ask for proof

That matters because the hidden cost in water hygiene is rarely the test alone. It is the disorder around the test: poor scheduling, late exception review, weak closure tracking, and disconnected filing.

HSE guidance and HSG274 Part 2 both support the logic of proportionate, system-based control. In other words, the value sits in managing the regime actively rather than treating each attendance as a separate event.

How does the ad hoc model usually become more expensive than it looks?

It becomes more expensive when fragmented control creates avoidable churn.

Imagine a block with a dated assessment, occasional monitoring, and reactive plumbing support. A little-used outlet is not flushed consistently. Temperatures move out of range. The issue sits in a report that nobody reviews quickly. One contractor attends to investigate. Another visit is needed for remedials. The board then asks for a summary before renewal. The managing agent spends time pulling logs from multiple places. The invoice trail may still look modest. The real cost has spread across delay, duplicated attendance, admin recovery, and uncertainty.

Now compare that with a planned regime. The outlet sits in a live task plan. Deviations are visible early. Remedials are raised from the first finding. Closure proof lands in the same evidence chain. The board sees status before renewal season rather than during it.

Why is this a better commercial decision for high-intent boards?

Boards are not usually trying to buy more maintenance. They are trying to buy fewer surprises.

That is the commercial inversion worth keeping in view. The option that appears cheaper at first glance often produces the higher governance cost later. A risk-based PPM regime helps your board see what is due, what is complete, what remains open, and what risk is building. That improves service-charge conversations, insurer readiness, and confidence during handover or refinance.

For managing agents, the gain is lower admin drag. For brokers, it is cleaner renewal evidence. For lenders and valuers, it is continuity. For residents, it often means fewer stop-start failures and clearer communication.

If your current setup feels fragmented, the smartest next move is often a targeted PPM diagnostic rather than a whole-portfolio reset. That lets your board see whether the real cost problem sits in scheduling, contractor interfaces, evidence handling, or weak escalation. Once that is visible, you can make a cleaner decision about whether your present model is genuinely saving money or quietly charging your board in time, friction, and preventable risk.