Program Audit Finding: Missing Test Reports at a Shopping Center
A cross-connection program administrator audits a 25-tenant shopping center. The property has one 6-inch RPZ at the service and 12 tenant-level devices (mostly dual checks and vacuum breakers). The audit finds: 9 of 12 tenant devices have no test report on file; the service RPZ report is present but the tester's certification number is missing; three tenants changed use (a nail salon added a hair-washing station, a dry cleaner added a spotting gun) without notifying the program; and the property manager cannot produce a current device inventory. The program's ordinance requires annual testing, a maintained inventory, and notification of changes in use. The administrator must decide on enforcement and on improvements to prevent recurrence, balancing tenant relations with public health protection.
1. Prioritize the audit findings by risk and decide what enforcement action is warranted for each.
Read the worked answer
Prioritization should follow hazard and exposure, not paperwork convenience.
Highest risk - changed uses: The nail salon's hair-washing station and the dry cleaner's spotting gun introduce new cross-connections (shampoo bowl with hose, spotting gun with chemical injection). These are health hazards and may require new point-of-use protection. Enforcement: immediate notice to the tenants and owner to install appropriate protection (vacuum breaker or RPZ as applicable) and submit documentation within a short deadline.
High risk - missing tenant test reports: Nine devices with no report means unknown protection status. Enforcement: require testing of all nine within 30 days and submission of reports; treat untested devices as unverified and follow up with re-inspection.
Moderate risk - incomplete service RPZ report: The report exists but lacks the tester's certification number. Enforcement: require a corrected report; do not treat the assembly as failed, but do not close the file until corrected.
Lower risk - missing inventory: This is an administrative gap that enables the other failures. Enforcement: require a complete inventory within 30 days, tied to tenant addresses and device serial numbers.
The administrator should issue a single consolidated notice with staggered deadlines, escalate to fines or water shutoff only if deadlines are missed, and document each step. Tenant relations are served by clear communication and reasonable timelines, not by waiving health-hazard requirements.
2. Recommend program changes to prevent this pattern from recurring across the administrator's service area.
Read the worked answer
The audit points to systemic weaknesses that likely repeat at other multi-tenant properties.
Inventory management. Build a database keyed to parcel and tenant, with device type, size, serial number, location, and last test date. Require the property owner to update it when tenants change.
Change-of-use notification. Add a requirement that tenants notify the program before altering plumbing or processes. Pair it with the business license or certificate-of-occupancy process so the notification is enforced at a natural checkpoint.
Tester accountability. Require test reports to include the tester's certification number and gauge calibration date; reject incomplete reports automatically and notify the tester.
Risk-based inspection. Focus field visits on high-hazard tenants (salons, dry cleaners, restaurants, medical offices) and on properties with past deficiencies.
Owner education. Send an annual packet explaining the owner's duties, deadlines, and consequences, and offer a template inventory.
Performance metrics. Track percent of devices with current reports, average days to correct deficiencies, and repeat-failure properties. Report these to the governing body quarterly.
Escalation policy. Publish a clear enforcement ladder (notice, re-inspection, fine, shutoff) so actions are consistent and defensible.
These changes convert the audit from a one-time cleanup into a preventive program.