You can learn more about an organisation’s water safety culture from one out-of-range temperature reading than from its entire policy folder. That single reading is the real test. Who sees it? How quickly? Is anyone actually allowed to stop a process, call a contractor or release spend because of it? And does the decision get written down, so the next person inherits it rather than rediscovering it? Culture is the sum of those small moments, not the binder on the shelf.

Organisations that end up in difficulty are rarely the ones with no paperwork. They have a risk assessment, a logbook with ticks in it, and a contractor who turns up on schedule. What they lack is the connective tissue: the part that turns a recorded anomaly into a decision, and a decision into a recorded lesson. That gap is where culture lives, and it is invisible on a compliance certificate.

Everything below assumes the basics are already in place — a risk assessment, a filled-in logbook, a contractor on a schedule — and asks the harder question: will the system hold up when a key person leaves, a building changes use, or an audit arrives unannounced?

What “culture” actually has to mean here

Strip away the values-statement version and a water safety culture is something concrete: a managed system in which ownership, authority, evidence and escalation are all explicit and all connected. The control chain itself is well established — understand the system, assess foreseeable risk, apply proportionate controls, monitor the evidence, keep records, and review when people, plant or use patterns change [1]. Culture is what decides whether that chain is lived or merely described.

The wider guidance has arrived at the same idea from different directions. The CDC frames a water management programme as the primary strategy for limiting Legionella growth and spread [2]. UK practice expresses the same duty through risk assessment, control, monitoring and review under L8 [1], and BS 8680 sets out the water safety plan as the documented way an organisation joins those parts up [3]. The WHO’s water-safety-in-buildings approach rests on the same logic: assess, control, verify, and keep a named group accountable for the whole [4].

The practical translation is narrow. A healthy culture is one where any competent person could point at a control and tell you why it exists, what result is acceptable, and exactly what happens when the result falls outside that range — without first checking who is on shift.

Draw your water safety as a wiring diagram, not an org chart

The most revealing thing a water safety leader can do is sketch the system as a flow of information, then look for the dead ends.

Put the duty holder at the top — the employer or organisation that carries the legal accountability and cannot delegate it away [5]. Below it, name the responsible person, and give that box two attributes the org chart usually omits: authority and budget. Around the responsible person, draw the water safety group — the small standing group that actually meets: estates or facilities, health and safety, the competent service provider, and, in clinical or care settings, an infection-control or clinical voice. At the outer edge sit the operatives, the sensors and the outlets where readings are taken.

Now add two kinds of arrows. Downward arrows are the “doing” lines: tasks delegated outward and down. Upward arrows are the “evidence” lines: readings, anomalies and near-misses travelling back in. On every upward arrow, write two things — the trigger that fires it and the time it should take. Stored hot water below the expected figure → responsible person, same day. Three missed flushes on a low-use outlet → water safety group, next meeting.

The diagram is healthy when three things are true: every box has a real name, not a job title nobody fills; every upward arrow has a trigger and a deadline; and no arrow ends in a box that takes no action. A blank box or a dead-end arrow is not a drawing flaw — it is the precise spot where your culture will fail under pressure.

Where these systems quietly fail

The failures are seldom dramatic, and almost never about microbiology. A few patterns recur.

  • The responsible person who cannot say no. A named individual with the title but no authority to halt a process or release spend is a single point of failure dressed up as control. The role only works if the person can act on what they find.
  • Records the organisation does not actually own. When the only copy of the monitoring history lives in the contractor’s system, you cannot audit your own control, and a change of supplier can erase years of evidence. A competent service provider does the work under your duty; the accountability, and the records, stay with you. Choosing one against the Legionella Control Association’s code of conduct is sensible [6] — but it does not transfer the duty.
  • The all-green dashboard. Remote monitoring is genuinely useful, yet a screen full of green can hide a missed reading rather than flag it, because “no data” quietly reads as “no problem”. If your remote monitoring cannot tell a good result from an absent one, the dashboard is reassuring you about the wrong thing.
  • Training kept as a date in a spreadsheet. Awareness that exists only as a completed module changes nothing at four o’clock on a Friday. The test of training your team is whether the person taking the reading knows what to do when it is wrong, not whether they passed a quiz.
  • No home for near-misses. The missed flush, the TMV someone meant to report, the cylinder that ran cool over a bank holiday — without a blame-free way to record these, they vanish, and you lose your cheapest early warning. An organisation that only logs its successes is not measuring its water safety; it is measuring its optimism.

A genuine caveat

This is guidance on how to organise and decide, not a set of control parameters. Nothing here fixes a temperature, a dwell time, a sampling interval or a remedial action — those come from a competent, site-specific risk assessment and the people qualified to set them. Treat sampling in particular as verification or investigation rather than a target: HSE is clear that how often you test should follow the system and its risk assessment, not a calendar chosen for comfort [7]. A strong culture makes those judgements visible and reviewable; it does not replace them.

Common questions

Do we need a formal water safety group, or is that only for hospitals?

The named, multidisciplinary group is an expectation in healthcare, but the principle scales down well. A single building does not need a committee — it needs one accountable person, a competent adviser, and a regular point where the evidence is actually looked at. Borrow the structure from BS 8680 [3] and size it to your risk, not your sector.

Who should own water safety — facilities, health and safety, or the contractor?

Ownership sits with the duty holder and, day to day, a named responsible person inside the organisation; it never sits with the contractor, who performs tasks under your duty [5]. The useful question is not which department, but whether the named owner has the authority and the information to act.

How do we know our culture is working before something goes wrong?

Test it on a real artefact. Take your worst monitoring reading from the last quarter and trace what happened to it: how long until someone competent saw it, what was decided, and whether the decision was written down. The honesty of that trail tells you more than any audit score.

Start with one reading

Before your next review, run the trace exercise on a single out-of-range result from your own records. Follow it from the moment it was taken to the moment something changed — or to the moment the trail goes cold. Wherever it goes cold is the first arrow to fix on your diagram, and it will tell you more about your organisation than any new policy could. For the longer-term discipline of confirming the controls keep working, the companion piece on auditing your Legionella controls picks up where this leaves off.

Sources

[1] HSE, “Legionnaires’ disease. The control of legionella bacteria in water systems — Approved Code of Practice and guidance (L8)”. https://www.hse.gov.uk/pubns/books/l8.htm [2] CDC, “Controlling Legionella”. https://www.cdc.gov/control-legionella/index.html [3] BSI, “BS 8680:2020 — Water quality. Water safety plans. Code of practice”. https://knowledge.bsigroup.com/products/water-quality-water-safety-plans-code-of-practice [4] WHO, “Water safety in buildings”. https://iris.who.int/server/api/core/bitstreams/2c302ce4-bca9-42bc-97b4-ddbe95f0c7f2/content [5] HSE, “Legionnaires’ disease — what you must do”. https://www.hse.gov.uk/legionnaires/what-you-must-do/index.htm [6] Legionella Control Association, “Code of Conduct for Service Providers”. https://www.legionellacontrol.org.uk/ [7] HSE, “Testing and monitoring your water system for legionella”. https://www.hse.gov.uk/legionnaires/testing-monitoring-water-system.htm