Updated October 17, 2026.
Take this to the job site.
This article as a one-page field sheet – the direct answer, the five assessment questions, and the return-to-service checks for water system work. Free PDF, prints clean, works offline.
The direct answer: there is no separate water ICRA standard, and waiting for one is how plumbing work escapes infection control review. The water assessment rides inside the two programs every hospital already runs: the ICRA, which governs construction risk to patients, and the water management program, which ASHRAE 188 requires and CMS expects. A water ICRA is what happens when those two meet before a valve closes — the team maps which lines the work touches, which patients drink and breathe downstream, how long the water will sit still, and what has to be verified before the line goes back into service. The airborne ICRA asks what the dust will do. The water ICRA asks what the stagnation will do. Both questions belong on the same permit.
Books for Bots: take this to your assistant.
This page as a book for your AI – the five-question assessment, the four scope tiers and their controls, and the return-to-service verification, with instructions your bot can run with, including what it should ask you first. Upload it to your assistant and plan the job together.
On this page: Why water needs its own assessment · The five questions · Four scope tiers, four control sets · During the work · Return to service is a verification, not a date · FAQ
Why water needs its own assessment
The classic ICRA was built around dust. Its matrix weighs what the work shakes loose into the air against who is breathing on the other side of the barrier, and it is genuinely good at that job. But a plumbing shutdown does not threaten patients through the air the crew is working in. It threatens them through the water system itself — through stagnation while lines sit idle, through biofilm sheared loose when pressure returns, and through every faucet, shower, and ice machine downstream of the work, including rooms the crew will never enter. A barrier and a negative-air machine do nothing for any of that.
Stagnant water is an incubator; moving water is a defense. When flow stops, disinfectant residual decays, hot water drifts down into the 77–113°F band where Legionella amplifies, and biofilm — the structured community of bacteria living on pipe walls — keeps growing in the dark. Restart is its own hazard: pressure transients and renewed flow shear biofilm off the wall and seed the system with exactly the organisms the shutdown cultivated. Our water system risks guide maps the five mechanisms in detail. This page is about the assessment that runs before them.
The regulatory floor already assumes this assessment happens. ASHRAE 188 water management programs — the programs CMS policy expects hospitals to maintain, and that The Joint Commission carries in its Physical Environment expectations — are built on system mapping, risk assessment, control limits, monitoring, and corrective action. Construction and renovation are exactly the disturbances those programs exist to govern. When a project touches the water system and the water management team hears about it afterward, the program has failed at its one job. The water ICRA is the hand-off that prevents that: the project notifies the program, in writing, before the work starts.
The five questions
Every water assessment, whatever form your facility uses, answers five questions. If a proposed plumbing job cannot answer all five, it is not ready for a permit.
1. Which water, which lines? Name the systems and segments the work touches: domestic cold, domestic hot, recirculation loops, and any specialty water in scope. Note what feeds them and what they feed. A valve map beats a memory — the line the crew believes is isolated and the line that is actually isolated have disagreed on real projects, and the discovery method was a wet ceiling.
2. Who is downstream? List the areas the affected lines serve, and name the highest-risk occupants among them — transplant, oncology, neonatal, burn, and other immunocompromised populations first, then general patient care, then non-clinical space. Risk in water work is a property of the downstream census, not of the work area. A shutdown in a mechanical room can be a high-risk event for a bone marrow unit three floors away if the riser is shared.
3. How long will the water sit? Stagnation time is the water version of dust load. A two-hour tie-in and a two-week phased shutdown are different risk events wearing the same work order. Record the expected idle time for every affected segment, including the low-use outlets at the ends of runs — the rarely opened faucet in the closed wing ages water exactly as surely as the capped line does.
4. What gets created, opened, or left behind? New piping, opened lines, and cut-outs each carry their own requirements. New piping must be disinfected and flushed before it connects to the potable system. Abandoned piping must be removed, not capped — a capped dead leg is a permanent incubation chamber plumbed into the building. If the design leaves a dead leg because removal is hard, the assessment is where that decision gets argued, not the punch list.
5. What proves it is safe to use again? Define the return-to-service verification before the work starts: which temperatures and disinfectant residuals get measured, at which sentinel points, by whom, and what result sends the line back for more flushing or disinfection instead. A job whose verification is “we will flush it good” has no verification. The full sequence is in return to service below.
Four scope tiers, four control sets
The tiers below are a working framework — the Hub’s synthesis of the ICRA’s scope logic and the water controls in CDC guidance and ASHRAE 188 programs — not a published standard’s table. Adapt the boundaries to your facility’s program; keep the ladder, because the ladder is the point: controls grow with stagnation time and downstream risk, never with how the work order happened to be written.
Tier 1 — No line opened, no shutdown. Like-for-like fixture work above the trap, inspections, and work on the room side of isolation valves in non-clinical areas. Controls: notify the water management team through the normal work-order channel; no flushing regime beyond reopening any outlet that sat unused; document and close. Most facilities handle Tier 1 inside routine maintenance, and that is fine — as long as the notification actually happens, because Tier 1 work in a closed wing is how unrecorded stagnation starts.
Tier 2 — Line opened or brief shutdown, non-clinical or low-risk areas. Localized repairs, valve replacements, short tie-ins outside patient care space. Controls: scheduled flushing of affected segments and low-use outlets at least weekly while any part sits idle; temperature and residual spot-checks at the nearest sentinel points before the area returns to normal use; new materials disinfected per the program before connection. The infection preventionist is informed; the water management team logs the event.
Tier 3 — Shutdowns or tie-ins affecting patient care areas, or any new piping connection. This is the tier where the water ICRA becomes a formal attachment to the ICRA permit. Controls: the five questions answered in writing; a flushing schedule for every idle segment, at least weekly and daily where the program calls for it; disinfection of new and opened piping before connection; temperature and disinfectant residual verification at sentinel points downstream before return to service; and a documented decision — made with the water management team and infection prevention, not by the contractor — on whether Legionella sampling is warranted before the lines reopen. High-risk units downstream move any Tier 3 job’s verification up to Tier 4 discipline.
Tier 4 — High-risk downstream, extended stagnation, or system-level work. Work affecting transplant, oncology, neonatal, or sterile processing water; shutdowns measured in weeks; boiler, heater, or riser work that drops temperatures system-wide. Controls: everything in Tier 3, plus a written recommissioning plan approved by the water management team and infection prevention before the shutdown begins; staged return to service area by area, each with its own verification; Legionella sampling where the team judges the risk elevated; and a named owner for the flushing regime for as long as any segment remains idle. Tier 4 jobs get a line in the water management program’s own records, not just the project file — surveyors read the program’s records, and a major construction event that never appears in them is a finding about the program, not the project.
During the work
Three habits carry the controls from paper to pipe. First, the flushing regime is a route, not an intention: named outlets, a named person, a schedule, and a log with temperatures where the program requires them. Weekly is the floor CDC guidance supports for dead legs and low-flow runs during construction; the log is what makes the floor real. Second, temperature discipline survives the disruption: hot water storage stays above 140°F and circulation at or above 120°F wherever the system still serves patients, and cold water stays below the growth range — construction that degrades the running system to protect the project has the priorities backwards. Third, changes re-open the assessment. A shutdown that stretches from days into weeks, a newly discovered dead leg, a downstream unit that converts to higher-acuity care mid-project — each one changes a five-questions answer, and the permit attachment gets amended, not annotated in someone’s notebook.
The coordination runs both ways. The ICRA for the same project already escalates precautions when water shows up as an environmental hazard — gray and black water events push work into the highest precaution classes in the ICRA matrix, and mold or water-damage remediation aligns its containment with the same barrier and pressure rules. Run the airborne and water assessments as one permit conversation and the scopes stop contradicting each other: the crew dewatering a flooded chase and the crew tying in two floors up are, to the building’s water system, a single event.
Return to service is a verification, not a date
More water events trace to recommissioning than to construction. The work finishes, the schedule exhales, and lines go live because the calendar says so — carrying two weeks of aged, warm, residual-free water straight to patient outlets. The water ICRA closes differently: the line returns when the verification passes, and the verification is the one defined in question five, before the work began.
The closing sequence is short enough to memorize. Flush every affected segment, including the low-use ends of runs, until temperatures and disinfectant residual at sentinel points match the program’s control limits — hot at temperature, cold genuinely cold, residual detectable. Confirm any required disinfection is complete and flushed out. Record the sampling decision and, where sampling was done, the results. Then three signatures close the permit attachment: facilities, infection prevention, and the water management team’s designee. One signature is a contractor’s assurance. Three signatures are a program working as designed.
File the closed attachment with the water management program’s records as well as the project’s. The program’s annual review — and the next surveyor — should be able to reconstruct every significant water event of the year from the program file alone: what was touched, how long it sat, what was verified, who signed. Facilities that can produce that file stop fearing the water questions in a survey. Facilities that cannot are describing their program from memory, and surveyors can tell the difference in about four minutes.
Frequently asked questions
Is there a separate water ICRA standard we should buy?
No. No ASHE or AAMI publication defines a standalone water ICRA. The assessment lives inside the ICRA process for the construction side and the ASHRAE 188 water management program for the water side. What you need is the hand-off between them, in writing, per project — which is what this page lays out. Beware any framework that sells the water assessment as a second program; two programs is how the hand-off gets lost.
Does every plumbing job need a water ICRA?
Every job needs the five questions; not every job needs the formal permit attachment. Tier 1 work — nothing opened, nothing shut down, non-clinical areas — is a notification and a log entry. The formal written assessment starts when lines open, water sits, or patients are downstream, and it scales with the tiers above. If your team cannot tell which tier a job is, that uncertainty is itself the answer: assess it.
When is Legionella testing part of the assessment?
When the water management team and infection prevention judge the risk elevated — extended stagnation, high-risk downstream populations, a system with a positive history, or a major disturbance. Testing is a decision the program makes with a reason recorded either way, not a default and not a substitute for the control measures. Temperature, residual, and flushing discipline prevent growth; a sample only reports on one moment at one outlet. Our Legionella water management guide covers the program-level logic, and the ASHRAE 188 requirements page covers the plan itself.
Who signs a line back into service?
Facilities, infection prevention, and the water management team’s designee — three functions, because the failure modes live in three different houses. Facilities owns the mechanical state of the line, infection prevention owns the patient risk call, and the water management team owns the record that the program was followed. A contractor’s sign-off belongs in the project file too, but it never substitutes for the owner’s three.
How does this relate to the renovation Legionella sequence?
It is the assessment half of the same job. Our renovation Legionella prevention guide walks the work itself — the prevention sequence during renovation and water system work. This page runs one step earlier: how the project gets assessed, tiered, and permitted so that sequence has authority behind it, and one step later: how the line earns its way back into service.
Go deeper
- Water System Risks During Healthcare Construction — the five amplification mechanisms this assessment exists to control.
- Healthcare Water Quality and Medical Utilities — the complete guide to the plant side, including where ST108 processing water splits from the building program.
- ICRA Meaning in Healthcare Construction — the pillar: the matrix, the classes, and the permit this assessment attaches to. Run a project through the Class Finder for the airborne half.
- ICRA in California — how the assessment discipline holds when HCAI’s seismic wave sets the schedule.
Running water work through an assessment your surveyor would recognize, or found a gap in this one? Talk to the Hub — corrections and field experience make these pages better.