A documented plan setting out how risks from Legionella and other water-system hazards will be managed. It defines responsibilities, monitoring, treatment, maintenance, and corrective actions.