This paper summarizes work with some twenty Australian and New Zealand water utilities over the past five years on implementation of risk assessments, developing Hazard Analysis and Critical Control (HACCP) plans and structuring overall Water Quality Management systems. Key results of this work, discussed in this paper, include: methodology and examples of efficient, accurate and integrated risk identification and assessment focussed on identifying high risks in terms of specific sources, controls and critical controls for catchments, reservoirs, water treatment plants and distribution systems; methodology and examples of how risks can be routed through the catchment to tap water supply systems and how risk can be modulated by controls; development of a semi-quantitative model for assessment of Cryptosporidium and Faecal Streptococci risks for both water supply and recreational waters using appropriate scientific research data for sources, transport, decay, treatment effects and disease risk tailored to each unique water supply system arrangement; how risk assessment outcomes are incorporated into HACCP plans which suit water industry operation and the need to consider both critical points and multiple barriers; how risk assessment and HACCP plans are incorporated into overall Water Quality Management systems consistent with ADWG Framework, ISO9001 and likely WHO principles; and, how computer based platforms may be used to best advantage in this work. The significance to the Water Industry of this work is primarily that it represents a substantial compilation of operational case studies and "do's and don'ts" for risk management covering drinking water examples. Effective use of computer and web based support systems is also highlighted as it helps ensure that the risk assessment is accurate and comprehensive and that it is user friendly, easily updated and kept accurate in the operating environment of water utilities. Includes 9 references, tables, figures.