Cut Audit Failures: HTM 04-01 Sampling Workflow for NHS Estates
HTM 04-01 treats microbiological sampling as a verification check, not a routine ritual: you sample when a risk assessment or a performance indicator suggests your controls might be failing. Frequency and site selection are risk-based decisions recorded in your Water Safety Plan, never a fixed calendar. Part B sets the operational framework, Part C covers Pseudomonas aeruginosa in augmented care, and BS 7592 governs the physical sampling method.
TL;DR:
Microbiological sampling should be based on risk assessments and system performance, not on fixed schedules, especially for enclosed water systems.
Open systems like cooling towers require more frequent testing, often quarterly, due to higher Legionella risks from aerosolisation and historical outbreak links.
Sample collection must follow strict procedures, including pre-flush collection, correct neutralisers, timely transport, and proper labeling to ensure reliable results.
Interpretation of results depends on thresholds, with positive findings prompting targeted re-sampling, remedial actions, and potentially wider system investigations.
Pseudomonas aeruginosa sampling in vulnerable care units needs a more aggressive, risk-based approach, with faster remediation and close coordination with infection control teams.
Table of Contents
Sampling procedure step by step: preparation, collection and labelling
Choosing where and how often to sample: site selection and frequency
Pseudomonas aeruginosa sampling specifics and appendix guidance
Laboratory requirements and what to specify when sending samples
Fitting sampling into governance: water safety groups and documentation
How Bespoke Compliance Solutions supports your sampling programme
What HTM 04-01 says about sampling: scope and purpose
HTM 04-01 Part B positions sampling inside the wider job of operational management, sitting alongside temperature checks, flushing regimes and disinfection records rather than replacing them. The guidance is explicit that routine microbiological monitoring is generally not required for enclosed hot and cold water systems unless the risk assessment or system performance points to a control failure. That single line changes how many estates teams should be working: sampling is a diagnostic tool triggered by a trigger, not a box to tick every quarter regardless of context.
Open systems behave differently. Cooling towers, spa pools and other open recirculating systems typically warrant more frequent testing, often quarterly, because they aerosolise water and have a longer history of Legionnaires’ disease outbreaks linked to them. Enclosed domestic hot and cold systems, the pipework serving wards, clinics and washrooms, are managed primarily through temperature control, flushing and disinfection, with sampling reserved for verification when something looks wrong or a new system is being commissioned.
BS 7592, the British Standard code of practice for sampling for Legionella bacteria in water systems, is cross-referenced throughout HTM 04-01 and sets out the practical detail: bottle types, sample volumes, handling and transport. Part B carries the appendices covering microbiological monitoring, while Part C deals specifically with Pseudomonas aeruginosa sampling for units treating vulnerable patients.
The practical upshot for facilities managers in England:
Sampling is triggered by risk indicators, not a default routine, for enclosed hot and cold systems.
Open systems such as cooling towers usually need more regular testing than closed pipework.
BS 7592 supplies the physical sampling method; HTM 04-01 tells you when and why to apply it.
Part C governs Pseudomonas aeruginosa sampling in augmented care settings specifically.
Anyone managing temperature records alongside sampling data will find the two workstreams overlap heavily. Our guide on temperature monitoring checks for Legionella compliance explains how those records feed the same risk picture that decides whether sampling is needed at all.
Sampling procedure step by step: preparation, collection and labelling
A defensible sample is one an auditor or a laboratory can trust without question, which means the method matters as much as the result. The steps below follow BS 7592 and the practical guidance embedded in the HTM appendices.
Confirm the reason for sampling and the outlet list before you arrive on site, matching each outlet to the risk assessment finding that triggered it.
Take the pre-flush (first draw) sample immediately on opening the tap, without running the water first, since this captures water that has been standing in the outlet fitting itself.
If a post-flush sample is also required, run the outlet for the specified period, then collect a second sample to characterise water further upstream.
Use the correct neutraliser for the disinfectant regime on that system: sodium thiosulphate where oxidising biocides such as chlorine dioxide are in use, or EDTA where copper or silver ionisation is present.
Fill sample bottles to the volume specified by the receiving laboratory, typically in the 200 to 1,000 millilitre range, leaving the neutraliser undisturbed.
Label each bottle immediately with outlet reference, date, time, sample type (pre-flush or post-flush) and the sampler’s initials, cross-checked against your sample sheet.
Record the chain of custody detail on the accompanying paperwork and keep bottles cool and out of direct light until collection by the courier.
Despatch samples to a UKAS-accredited laboratory on the same day wherever possible, avoiding weekend delays that let samples sit too long before analysis.
Timing matters more than most teams realise. Sampling is best carried out after the outlet has had a period of low or no use, preferably at least two hours, so the sample reflects standing water conditions rather than water that has just been flushed through by normal use. Avoid disinfecting or cleaning a tap immediately before sampling: doing so can artificially suppress counts and produce a result that misrepresents the system. Equally, if a pre-flush sample is requested, running the tap first defeats the purpose entirely.
Pro Tip: Print sample sheets the day before and pre-label bottles with outlet references only, leaving date and time blank until the moment of collection, so a delayed site visit never means relabelling everything from scratch.
Choosing where and how often to sample: site selection and frequency
Site selection starts with the risk assessment, not with a generic outlet list borrowed from another building. Sentinel outlets, those furthest from the water source or most representative of a section of pipework, give the clearest picture of system-wide conditions. In a healthcare setting, priority outlets typically include:
Hand-wash sinks and patient-contact outlets in wards treating immunosuppressed or otherwise vulnerable patients.
Distal outlets at the extremities of the pipework network, which reveal whether stagnation is occurring at the system’s edges.
Thermostatic mixing valves (TMVs) where clinically necessary, since these mix hot and cold water at a point close to patient contact.
Outlets previously implicated in a positive result, to confirm remedial works have been effective.
Frequency follows the same logic. There is no fixed interval written into HTM 04-01 for enclosed systems: sampling happens when the risk assessment calls for it, following a positive result, after remedial works, or during commissioning of a new or altered system. A single positive result at moderate concentration might warrant a re-test of that outlet within a matter of weeks once corrective action has been taken, while a clear system-wide problem could justify a broader batch of samples across multiple outlets on the same visit.
Coordinating that batch with the receiving laboratory avoids the common problem of samples arriving faster than a lab can process them, or arriving late on a Friday with no weekend capacity. Agreeing turnaround times and sample volumes with the laboratory before the sampling day keeps the whole exercise auditable and prevents delays that leave a ward waiting on results it needs urgently.
Water Safety Groups should document the rationale for every sampling site and frequency decision in the Water Safety Plan, so an auditor can see the logic rather than just the outcome. Our overview of Water Safety Group responsibilities covers how that governance structure should record these decisions.
How to interpret results and act on them
A result on its own means little without a clear escalation path attached to it. Most laboratories and HTM guidance work with interpretation bands roughly along these lines, though exact thresholds should always be confirmed against your laboratory’s reporting standard and your own risk assessment.
Not detected: no action beyond routine record-keeping and confirming the sample was taken correctly.
Low counts: review control measures, consider a repeat sample, and check temperature and flushing records for that outlet.
Higher counts: escalate promptly, review or disinfect the affected outlet or system section, and resample after remedial action.
Persistent or system-wide positive results: commission a wider engineering survey and consider whether the Water Safety Group needs to notify public health or health protection teams.
Laboratories used for this analysis should be UKAS-accredited and enrolled in a water microbiology proficiency testing scheme, which gives results a level of assurance that an uncertified lab cannot match.
When a result sits in the escalation band, the next move is usually paired resampling: a pre-flush and post-flush pair at the same outlet, which helps distinguish a localised outlet problem from a wider pipework issue. If the wider system is implicated, sampling should extend to nearby outlets fed by the same branch of pipework, and an engineering survey should look at temperature control, dead legs and any recent works that might have disturbed biofilm.
Every result, action taken and re-test outcome should be logged against the outlet reference, with dates, so the Water Safety Group can see the full history rather than a single snapshot. Persistent contamination that resists remedial action, particularly on units treating vulnerable patients, is the point at which health protection teams should be brought into the conversation.
Pseudomonas aeruginosa sampling specifics and appendix guidance
Pseudomonas aeruginosa sampling follows a different logic to Legionella sampling, largely because the organism behaves differently in pipework and the patient groups at risk, typically neonates and other augmented care patients, tolerate very little margin for error.
The core technique is the paired pre-flush and post-flush sample. High counts on the pre-flush sample combined with low counts on the post-flush sample point to contamination localised at the outlet fitting itself, often the tap or TMV rather than the pipework feeding it. Similar counts across both samples suggest the contamination sits further upstream, in the pipework or a storage vessel, which points towards a different and usually larger remedial job.
Part C of HTM 04-01 sets out exemplar sample sheets and recommended outlet lists specifically for augmented care units, reflecting the fact that these units need a tighter, more consistent sampling regime than a general ward.
Augmented care units should sample outlets identified in the unit’s own risk assessment, not a generic list copied from another ward.
TMVs serving vulnerable patients need particular attention, since they mix water close to the point of patient contact and can harbour biofilm in their internal components.
A positive result in an augmented care setting usually triggers faster remedial action than the same result would elsewhere, given the patient group’s reduced tolerance for exposure.
Appendix guidance should be read alongside the unit’s infection prevention and control team, since clinical risk and engineering risk need to be weighed together.
Laboratory requirements and what to specify when sending samples
The value of a sample is only as good as the laboratory analysing it. HSE guidance is direct on this point: laboratories should hold UKAS accreditation and take part in a recognised water microbiology proficiency testing scheme, which gives external assurance that the lab’s methods and results are consistent and reliable.
Detection limits matter too. For Legionella culture methods, HSE guidance points to a theoretical detection limit of no more than 100 cfu per litre, and it is worth confirming this figure with your chosen laboratory before sampling begins, since a laboratory working to a coarser detection limit could miss a genuinely low-level positive result.
When submitting samples, specify:
The neutraliser used in each bottle, matched to the disinfectant regime running on that system.
The sample type, pre-flush or post-flush, and the outlet reference for each bottle.
Required turnaround time, particularly where a ward is waiting on results before returning an outlet to use.
Transport and hold conditions, since samples degrade if left too long at the wrong temperature before analysis.
A laboratory that cannot confirm its UKAS accreditation status, or that is vague about detection limits, is not the right choice for healthcare sampling, regardless of price. Our Legionella & water testing service works with accredited laboratories as standard for exactly this reason.
Fitting sampling into governance: water safety groups and documentation
Sampling only works as evidence when it sits inside a properly run governance structure. The Water Safety Group, bringing together estates, infection prevention and control, and microbiology expertise, is where sampling data gets interpreted through both an engineering and a clinical lens rather than read in isolation by one team.
The Water Safety Plan is where that interpretation gets written down: which outlets are sampled, why, how often, and what happens when a result crosses a threshold. During commissioning of new or refurbished buildings, sampling plans and acceptance criteria should be agreed by the Project Water Safety Group and set out clearly in the tender specification, so there is no ambiguity later about what counts as a pass.
Documentation an auditor will expect to see includes:
Sample logs showing outlet reference, date, sample type and result for every sample taken.
Chain of custody records tracking each bottle from collection to laboratory receipt.
Investigation records for any positive result, including remedial action taken and the outcome of resampling.
Minutes from Water Safety Group meetings showing how sampling data influenced decisions.
Pro Tip: Keep sample logs and chain of custody paperwork in the same file as the outlet’s temperature records, so an auditor sees the full evidence trail for that outlet in one place rather than piecing it together from separate systems.
Teams that treat sampling data and temperature monitoring as two disconnected workstreams tend to struggle most at audit. Our piece on automated temperature monitoring for Legionella checks explains how continuous temperature records and targeted sampling should reinforce each other rather than sit in separate silos.
Practical tips and common pitfalls from the field
Most sampling failures are avoidable and come down to a handful of recurring mistakes rather than anything complicated.
A sampling day checklist should cover, at minimum:
Pre-printed sample sheets with outlet references matched to the current risk assessment.
Bottles pre-labelled with outlet reference, and the correct neutraliser already confirmed for each system.
A clear note of which outlets need pre-flush only versus paired pre-flush and post-flush samples.
Chain of custody paperwork ready to complete at the point of collection, not filled in later from memory.
Transport arrangements confirmed with the courier and laboratory before leaving site.
The most common audit failures we see are mundane rather than dramatic: bottles labelled with the wrong outlet reference, taps cleaned or disinfected the night before sampling without anyone flagging it, and sampling batches sent to the lab in a way that overwhelms its processing capacity on a single day. Each of these produces results that look fine on paper but will not survive scrutiny once someone checks the underlying record against what actually happened on site.
Automated temperature monitoring complements targeted sampling rather than replacing it. Continuous temperature data shows whether a system is being controlled day to day, while sampling confirms whether that control is actually keeping microbiological counts down. Relying on one without the other leaves a gap that an inspector or, worse, an outbreak investigation will find quickly.
What matters most in HTM 04-01 sampling
The conventional advice on this topic leans too heavily on sampling as reassurance. Plenty of estates teams treat a clean sample as proof that a system is safe, when HTM 04-01 itself frames sampling as a check on controls, not a substitute for them. A negative result tells you nothing about a system with a poor flushing regime or a temperature fault that has not yet produced a positive culture.
The bigger overlooked issue is design. Systems with dead legs, oversized pipework or long periods of low use will keep generating risk regardless of how often you sample, and no amount of testing fixes a plumbing layout that encourages stagnation. Correct pipe sizing at the design stage, as covered in professional guidance on sizing water pipes, does more for long-term control than any sampling schedule bolted on afterwards.
If you take one thing from this guide, prioritise getting your risk assessment and Water Safety Plan right before you worry about sampling frequency. Sampling done well is a useful confirmation. Sampling done in place of good engineering and monitoring is a false sense of security with a laboratory report attached.
— Sammi
How Bespoke Compliance Solutions supports your sampling programme
[
Getting HTM 04-01 sampling right means having risk assessments, sampling logistics and laboratory relationships that work together rather than as separate jobs handled by separate people. Bespoke Compliance Solutions runs Legionella Risk Assessments from £185 one off, which set the sampling sites and frequency your Water Safety Plan needs, alongside Legionella Water Testing & Analysis from £55 one off per sample, using UKAS-accredited laboratory partners for both Legionella and Pseudomonas aeruginosa testing.
For sites that want continuous assurance between sampling rounds, our Automated Water Temperature Monitoring service gives estates teams ongoing visibility that reduces how often reactive sampling is needed in the first place. Whether you are setting up a sampling regime for the first time or reviewing one that has grown inconsistent across sites, it is advisable to discuss a plan built around your buildings and your patient population with an expert compliance solutions provider.
Sources
FAQ
What is the British standard for sampling for Legionella?
BS 7592 is the British Standard code of practice for sampling for Legionella bacteria in water systems, covering sample bottle types, volumes, neutraliser use and handling. HTM 04-01 cross-references BS 7592 as the methodology healthcare estates teams should follow when a sample is required.
What are the requirements for compliance with HTM 04-01?
Compliance means running a risk-based Water Safety Plan overseen by a Water Safety Group, with sampling used to verify controls rather than as a fixed routine for enclosed systems. Part B covers operational management and Part C covers Pseudomonas aeruginosa sampling in augmented care units, both cross-referencing BS 7592 for sampling method.
How often should legionella be sampled?
There is no fixed interval for enclosed hot and cold water systems: sampling frequency should be set by the risk assessment, triggered by a positive result, remedial works or new commissioning rather than a routine calendar. Open systems such as cooling towers typically warrant more regular testing than enclosed pipework.
What is the protocol for sampling for Legionella?
The protocol follows BS 7592: take a pre-flush sample on first opening the outlet, add the correct neutraliser for the disinfectant regime in use, and label the bottle with outlet reference, date, time and sample type. Post-flush samples, taken after running the outlet for a set period, are added where paired sampling is needed to localise contamination, and samples should reach a UKAS-accredited laboratory promptly after collection.
Recommended
Comments