Legionella Compliance & ASHRAE 188 Consulting
Independent, vendor-neutral risk assessment and water-management-program advisory for cooling towers, evaporative condensers, and industrial water systems where Legionella is a live life-safety and regulatory exposure. We build programs to the ANSI/ASHRAE Standard 188 benchmark, interpret sampling data, and audit control strategies — without selling a single gallon of biocide.
Request a Legionella risk reviewFrom Aerosol Risk to Documented Control
Legionella pneumophila and related species colonise warm, stagnant, or poorly biocide-controlled water and become a hazard the moment infected water is aerosolised — most commonly through cooling tower drift, evaporative condensers, decorative fountains, and process water that vents to atmosphere. Industrial cooling towers are a recurring source in documented outbreaks precisely because they combine the three conditions the organism needs: water in the 20–45°C growth range, nutrient sources (biofilm, scale, sediment, amoebae that host and shield the bacteria), and a mechanism to disperse fine droplets over a wide radius. Our work starts from that mechanism, not from a checklist.
A defensible program begins with a written water management plan (WMP) that inventories every system capable of generating an aerosol — cooling towers, evaporative condensers, decorative water features, and any process water with intermittent flow — and assigns a documented control strategy to each. In the United States, ANSI/ASHRAE Standard 188 is the recognized standard of care for Legionellosis risk management in building water systems, and it is the benchmark we build to: it defines a whole-building program around governance, hazard analysis, validated control limits, monitoring, corrective action, and verification. State and municipal rules sit beneath that benchmark as the regulatory floor — New York State (10 NYCRR Part 4) and New York City (24 RCNY Ch. 8) require cooling-tower registration, a maintenance program and plan, scheduled inspection, annual certification, and routine Legionella culture testing. Those rules are prescriptive on the cooling tower, but narrower in scope than 188, which covers the whole building. Meeting local code does not by itself produce a compliant ASHRAE 188 program — a distinction we make explicit in every engagement.
Monitoring itself is a technical decision, not an administrative one. Culture (heterotrophic plate count and Legionella-specific culture on selective media) remains the regulatory reference method in most jurisdictions but takes 7–10 days to result — too slow to catch a rapidly developing excursion. Quantitative PCR (qPCR) returns same-day results and detects both viable and non-viable organism DNA, making it a valuable early-warning and trending tool but a poor substitute for culture where a regulator requires colony-forming-unit data. We advise clients on which method — or combination — fits their risk profile, how to interpret discordant results between the two, and how to set internal action levels that trigger a documented response before a regulatory or outbreak threshold is reached.
Control itself rests on three levers working together: oxidising or non-oxidising biocide dosing calibrated to actual system biofilm load rather than a generic ppm target; mechanical control of scale and sediment that would otherwise shield biofilm from biocide contact; and operational discipline — eliminating dead legs, low-flow zones, and stagnant lay-up periods that let a system re-colonise between shutdowns. Dip-slide and ATP-based rapid tests give operators a same-shift read on biological activity between formal lab samples, but they are a trending tool, not a compliance record. We help clients build a monitoring cadence that satisfies the regulator's evidentiary requirements while giving operations a genuine early-warning signal — and we conduct independent risk assessments that identify design and operational gaps before an inspector, insurer, or outbreak investigation does.
ASHRAE 188 as the Standard of Care
We treat ANSI/ASHRAE Standard 188 as the benchmark and local code as the floor, because that is how a program is judged after an incident. Standard 188 organizes a water management program around seven required elements: a program team with documented authority; a description of the building water systems; an analysis of hazards and identification of control locations; control measures with quantifiable limits and monitoring; corrective actions defined in advance; verification and validation that the program actually works; and documentation and communication of the whole thing. Local rules such as the NYC cooling-tower code are stricter on some points — notably testing cadence — but narrower in scope, focusing on the tower rather than the whole building.
The two elements most often missing in otherwise code-compliant programs are the documented hazard analysis (element 3) and validation (element 6) — proving the controls are actually holding, not just that samples were taken. As an independent, vendor-neutral advisor, IWA builds and audits programs against all seven elements, identifies where local code leaves gaps against the 188 benchmark, and produces the records that stand up to an inspector, insurer, or outbreak investigation. Our free starting-point checklist below walks each element and flags where the NYC/NYS code differs.
Systems and Sites We Assess
Cooling Towers & Evaporative Condensers
Registration, inspection, and biocide/scale control strategy for open recirculating systems.
Healthcare & Hospitality Campuses
High-vulnerability occupant populations where domestic and process water share infrastructure with cooling systems.
Refining, Petrochemical & Power
Large multi-cell cooling tower arrays with complex hydraulics and inconsistent flow distribution.
Post-Incident & Insurance Review
Independent risk assessment following an excursion, inspection finding, or outbreak investigation.
Legionella Compliance Advisory Worldwide
United States
ASHRAE 188 program design, plus New York State 10 NYCRR Part 4 and NYC 24 RCNY Ch. 8 cooling-tower compliance strategy.
UAE
Evaporative and district cooling risk assessment aligned with Abu Dhabi and Dubai environmental frameworks.
Saudi Arabia
Cooling tower Legionella control across Jubail, Yanbu, and Ras Al-Khair industrial complexes.
Qatar
Risk management for evaporative systems in Ras Laffan and Mesaieed industrial cities.
Questions Facility Teams Ask Us
Is qPCR an acceptable substitute for culture testing?
Not usually as a standalone compliance record. qPCR gives a fast, same-day result and is excellent for trending, but most regulatory frameworks still reference culture (CFU) data as the evidentiary standard. We typically recommend qPCR for early warning between scheduled culture samples, not as a replacement for them.
Do we need a written water management plan if we already dose biocide?
Yes. Biocide dosing alone is not a program. ANSI/ASHRAE 188 and most municipal ordinances require a documented plan that inventories every aerosol-generating system, defines control limits, assigns responsibility, and records corrective actions — the plan is what demonstrates due diligence if an incident occurs.
Can you assess our program without selling us biocide or monitoring equipment?
That is the basis of our engagement model. IWA sells no chemicals, biocides, or monitoring hardware, so our risk assessments and control recommendations are not filtered through a product line — we tell you what the water chemistry and hazard profile actually require.
If we meet our local cooling-tower code, are we ASHRAE 188 compliant?
Not necessarily. Local codes such as NYC's cooling-tower rules are often stricter on specific points (like testing cadence) but narrower in scope — they focus on the tower, not the whole building. ASHRAE 188 requires a whole-building water management program, including a documented hazard analysis and a validation step that local code typically does not mandate. We treat 188 as the benchmark and local code as the regulatory floor, and we identify exactly where the gaps are.
The Legionella and ASHRAE 188 resource set
Four connected resources covering the same problem from different angles: what the regulation requires, what the standard of care requires, where the two diverge, and how an independent review verifies the difference.
IWA is a consulting practice, not a testing laboratory. We author and audit water management programs and coordinate with accredited labs where sampling is required — talk to us about a program review.
Get an Independent Legionella Risk Assessment
Principal-led review of your water safety plan, sampling program, and control strategy — vendor-neutral, worldwide.
Contact IWA