Water Hygiene Contract Mobilisation: A Practical Guide
Mobilisation is the stretch between awarding a water hygiene contract and the point where routine Legionella control runs smoothly, with records, access, contacts and reporting all in place. It starts at award, or earlier if you write the requirements into the tender. It ends when both sides have signed off that the service works as specified. Done well, you never have a gap in compliance. Done badly, you find out at the first audit.
This guide is for facilities managers, estate managers, compliance managers and duty holders who are bringing in a new contractor, or taking on a new site. It covers what to agree, what to hand over, what to check and what usually goes wrong.
TL;DR
Mobilisation covers the whole water system, including deadlegs, intermittently used outlets and anything temporarily out of use, not only the outlets people use every day.
Define the scope in writing before the start date: reports, sampling, turnaround times, KPIs and which duties stay with you.
Hand over the asset register, schematics, site contacts and access arrangements on day one, and keep every record for at least five years.
Plan for asset validation and schematic updates within the first 90 days, then review performance against agreed KPIs.
Even when delivery is outsourced, governance stays with you as the client.
Table of Contents
What mobilisation involves, and when it begins and ends
Mobilisation is a project in its own right. It turns a signed contract into a working service: people named, sites visited, assets verified, records transferred and reporting lines tested. Routine services such as temperature checks, sampling and tank inspections then run against a written scheme rather than against assumptions.
The scope of the work is wider than most people expect. The HSE’s approved code of practice, L8, says to consider the water system as a whole, including deadlegs and parts used intermittently, as well as parts temporarily out of use. A contractor who only visits the taps staff use daily has not mobilised your site.
In practice we treat mobilisation as four phases:
Preparation: scope, responsibilities and contacts agreed in writing.
Handover: records, drawings, access and site contacts passed across.
Baseline: assets verified, risk assessment reviewed or commissioned, control scheme confirmed.
Stabilisation: first reporting cycles, KPI review, formal sign-off.
It ends on an agreed exit point, not when the first invoice is raised. Set that point in the contract, for example a formal review after the first reporting cycles.
Agree the scope before the start date
Most mobilisation problems begin in the specification. The National Association of Local Councils advises clients to define the contractor’s scope before tender. That includes report format, software interfaces, drawings or schematics, asset-register requirements, scald assessment, risk classification, assessor competence, sampling requirements, turnaround times and KPIs.
The same guidance warns that thin detail in a specification makes it more likely you will not get what you need to help prove compliance. If you are already past tender, put the missing detail into a mobilisation agreement or an addendum signed by both sides.
Decide who does what
The written agreement should state which Legionella-control services the contractor provides and which duties remain with you. That is the position in the LCA Code of Conduct. The same code says client and contractor should agree routine and emergency contacts, identify the duty holder and responsible persons, and use staged escalation for significant concerns.
Published policies show how the split works in practice. Broxtowe Borough Council’s policy gives responsible persons and their deputies the job of appointing competent contractors, documenting their scope, monitoring their work, reviewing risk assessments and making sure defects are acted on. Contractors supply service documentation and report defects through named contact lines. An NHS trust policy goes further and describes an Authorised Person (Water) responsible for day-to-day implementation of the written scheme, planned preventative maintenance, timely remedial works, record availability, audits, training needs and escalation.
The lesson is consistent. You can outsource delivery, but you keep governance: reviewing evidence, acting on defects and making sure the written scheme is implemented.
A simple responsibility table
Task | Usually led by | Evidence to keep |
Appoint contractor and document scope | Responsible person | Signed scope, specification |
Issue asset register, schematics, access details | Client | Handover record |
Verify assets and update drawings | Contractor, checked by client | Updated schematics, tagged asset list |
Routine monitoring, sampling, inspections | Contractor (as agreed) | Reports, lab results, logbook entries |
Review reports and act on defects | Client | Action log with dates |
Escalation of significant concerns | Both, per agreed route | Escalation record |
Adjust the table to your own agreement. The point is that every line has one named owner.
Hand over the site information the contractor needs
A contractor cannot assess what they cannot see. On day one, have the following ready:
Asset register of water plant: cold-water storage tanks, calorifiers, hot-water generators, pumps, TMVs and outlets.
Schematics of the water systems, including parts temporarily out of use.
Previous risk assessments, management plans and remedial action records.
Logbooks and monitoring records, including temperature and sampling results.
Site contacts and access arrangements, including keyholders, out-of-hours routes and restricted areas.
Training records for staff with water-safety duties.
For complex systems, L8 says a site survey should cover all water systems, with an asset register of associated plant and an up-to-date schematic, including parts temporarily out of use. Deadlegs and intermittently used parts belong on it too.
Keep the paperwork. The same guidance requires monitoring, inspection, testing and checking records to be retained for at least five years, and risk-assessment records and precautionary measures must be recorded where the employer has five or more employees. Transferring historic records at mobilisation protects that continuity.
A housing association’s published project brief is a good model: the client issues the asset register, site contacts and access arrangements at contract launch, and service visits are raised through a contractor portal and tracked by job number and priority.
If your logbook is paper, patchy or missing, mobilisation is the moment to fix it. Our Legionella logbook gives each site one consistent place for checks, results and actions.
Establish the control scheme and monitoring
The first weeks should confirm that a suitable risk assessment and written control scheme exist and match the site as it is today. The NHS policy referred to above says risk assessments should cover cold-water storage tanks, hot-water generators, distribution systems and other water-risk items, with plant-room and building schematics forming part of them. Where the risk cannot reasonably be avoided, a written control scheme should be implemented and properly managed.
If the existing assessment is out of date, or the site has changed since it was done, commission a new one early. A Legionella risk assessment from us starts at £185, and the quote depends on the size and complexity of the site.
Larger public contracts show what a mature scheme looks like. A 2025 Royal Household notice requires planned maintenance against written schemes, reactive remedials arising from sampling, routine maintenance of specified plant, additional sampling and services as agreed, and work managed through a CAFM system. You do not need a CAFM system to copy the principle: every task is planned, recorded and tied to a written scheme.
Decide at this stage how you will monitor temperatures. Manual checks need a clear schedule and a trained person. Where sites are large or staffing is thin, automated water temperature monitoring gives a continuous record. Our guides to completing temperature monitoring checks and a temperature monitoring checklist help you set up the manual routine.
A mobilisation timeline you can adapt
The timeline below is our suggested pattern, not a regulatory requirement. Stretch or compress it to match the number of sites and the condition of your records.
Period | Focus | Exit check |
Before start | Scope, contacts, responsibilities, access agreed in writing | Signed agreement and contact list |
Weeks 1 to 2 | Record transfer, site introductions, access confirmed | Handover record complete |
Weeks 3 to 4 | Asset verification, baseline survey, schematic review | Gaps and urgent remedials listed |
Week 5 onwards | Routine services begin against the written scheme | First reports received on time |
Up to day 90 | Asset list validated and tagged, drawings updated, KPI review | Formal sign-off of mobilisation |
The 90-day marker is not arbitrary. The Royal Household notice above requires asset-list validation and tagging within the first 90 days, updated schematics and drawings, regular reports, identification of low-use outlets and vacant or inaccessible areas, and a review of performance against KPIs.
Urgent findings cannot wait for day 90. If the baseline survey shows a tank in poor condition or a system needing disinfection, deal with it straight away. Our system disinfection and tank work covers cleaning, disinfection, cold water tank repair or replacement, and ongoing maintenance contracts. Our method of works page sets out how that work is carried out.
Set handover controls and reporting rules
Vague service levels are where good intentions fade. The same housing-association brief sets concrete controls: a job is accepted or rejected within eight working hours, scheduled within eight working hours after acceptance, and given a worksheet within two working days of the visit, with notes explaining any delay. Electronic certification must be compliant before payment, and KPI submissions are monthly.
You do not need to copy those figures, but you do need figures. Agree:
how fast quotes, reports and certificates are returned;
how defects are classed and how quickly each class is escalated;
which KPIs you will review, and how often;
where records live and who can see them.
Platform expectations are rising. A 2026 Academy Transformation Trust notice covers more than 5,000 water-hygiene assets and requires a secure online platform for planned maintenance records, temperature data, laboratory results, risk assessments, management plans and remedial-action tracking.
Check the contractor’s own systems
The LCA Code of Conduct requires competence systems, training and competence records, equipment calibration or validation, corrective-action checks, annual formal service reviews and documented auditing of service outputs. Those are sensible items to ask any contractor to evidence at mobilisation, and to build into your annual review.
Once services are running, a periodic self-check helps. Our commercial water hygiene audit checklist gives you a structured way to test that records, actions and responsibilities hold up.
Mobilising across schools and healthcare sites
Multi-site estates add complexity: different building ages, different occupancy patterns and different risks. Three habits help.
Standardise the paperwork, not the risk. Use one asset-register format, one reporting format and one escalation route across all sites, but let each site’s risk assessment reflect its own systems.
Plan around occupancy. Schools have long holiday periods when outlets go unused, which is exactly when low-use outlets and deadlegs matter. Agree up front how flushing and checks are handled outside term time. See our guidance for schools, colleges and universities.
Respect vulnerable occupants. Healthcare premises need access arrangements that fit clinical activity, and a faster route for escalating concerns. Our page on healthcare premises explains how we approach them. For offices and mixed commercial buildings, see offices and commercial premises.
Across a trust or group, name one responsible person per site and a deputy, as the council example above does, and give the central team access to the same reports.
What commonly delays mobilisation
Missing records. No asset register or schematic means the contractor has to build one, which pushes back the baseline.
Unclear access. Locked plant rooms, unavailable keyholders and restricted areas cause missed visits.
Undefined scope. If reports, sampling or turnaround times are not specified, you only find out at the first report.
No named owner. Without a responsible person and deputy, defects sit unactioned.
Incumbent exit. When an outgoing contractor stops work before a new one is ready, compliance is exposed. The 2026 Academy Transformation Trust notice describes the incumbent planning to cease services, creating an immediate statutory-compliance risk and prompting a direct award to ensure continuity.
The last one is the most avoidable. Agree an overlap period with the outgoing contractor wherever you can, and ask them for records before they leave.
Most clients tell us the contract was the easy part. The hard part is the first few weeks, when nobody is sure who holds the schematic, who has the keys to the plant room or who gets the call when a temperature reading is wrong. We build mobilisation around three things. First, a site-specific plan: our services are bespoke to each organisation’s sites across the UK, so we do not push a template onto a building it does not fit. Second, clear documentation: risk assessment, control programme and logbook system that your responsible person can pick up and use. Third, support that continues after sign-off, because knowledge among your own staff is what keeps a site compliant between visits. If you take only one step, make it this: write down who owns each task before the first visit. Everything else is easier after that. Sammi
Our perspective
How we can help you mobilise
Bespoke Compliance Solutions supports organisations across the UK with Legionella risk assessments, water testing and analysis, temperature monitoring, tank cleaning and disinfection, TMV servicing, remedial works, awareness training and ongoing consultancy. Water testing starts from £55 per sample, and risk assessments from £185. Other services are quoted per site.
[
If you are preparing a new contract or taking on a site, talk to us about Legionella testing and analysis or start with a risk assessment. We can also train the people who will carry out day-to-day checks through our Legionella awareness training, on site or online.
FAQ
How long does water hygiene contract mobilisation take?
It depends on the number of sites, the state of your records and the size of the systems. A common pattern is a few weeks to get routine services running, then a review of asset validation and KPIs by around 90 days. Agree the exit point in the contract so both sides know when mobilisation is complete.
Who is responsible for compliance once a contractor is appointed?
You are still responsible for governance. The contractor delivers the services listed in the written agreement, while duties not listed stay with you. Name the duty holder, responsible person and deputy, and agree escalation routes at the start.
What records should I keep from mobilisation?
Keep the signed scope, asset register, schematics, risk assessments, monitoring and testing records, logbook entries, remedial action logs and training records. L8 requires monitoring, inspection, testing and checking records to be retained for at least five years.
What if my current contractor stops work before the new one starts?
That gap is a compliance risk, so plan an overlap and request all records before the outgoing contractor leaves. If the gap is unavoidable, arrange interim cover so checks and sampling continue.
Do I need a new risk assessment when the contractor changes?
Not automatically, but the existing assessment must still reflect the site as it is. Review it during the baseline stage, and commission a new one if the systems have changed or the document is out of date.
Sources
Recommended
Comments