Legionella risk assessment