To hopefully help answer the question regarding steam testing - I used to work in a cannery where we had to do steam sampling and testing as per the BRC requirement.
Fortunately we had a few long steam pipes that would cool the first part of the steam and cause it to condense back to water, allowing us to collect it. It was standard practice to open the pipe/valve and run the steam until it had blown the condensed water out to ensure full steam to the relevant section of the factory/equipment. If you were quick, you could catch some of the first condensate before it got too hot.
Occasionally we could collect the condensed steam water the next day, if the operators shut off the valves in the right sequence, we could "capture" some steam, wait for it to cool then simply open the valve and collect the water as it ran out, in fact many prefered this method to avoid any potential OH&S issues.
We would then test this water for pH and conductivity, using simple meters in the lab, clarity (visually assesed) and taste/aroma. If it gave similar results to the potable town water, then we said it was good. Did not test for micro, what would be the point, what is going to survive inside saturated steam?
We did this every 3 months, kept records of course. Auditors were happy with this response/approach, never had a NCR raised against it.
Incoming water testing was a standard practice for our lab, we tested daily, but only pH and conductivity and did a visual assesment. Every three months we did an in house e.coli, TPC and coliforms test/count using the 3M Petrifilm product. Again auditors were happy with this.
Hope this helps.
Bawdy.