Skip Ribbon Commands
Skip to main content

Programme and Operations Policies and Procedures



Please Wait ...Processing
POPP>Accountability>Risk Management>Enterprise Risk Management
Enterprise Risk Management
1.0 Relevant Regulations and Rules
UNDP Financial Regulations and Rules (2012)
Financial Rule 118.08 a - c
Regulation 21.02
2.0 Policies
Main Policy
Enterprise Risk Management
The Risk Appetite Statement and the Risk Appetite Statement Guidance supplement this policy.
3.0 Procedures
Main Procedures

Managing Project-Level Risk (Country, Regional or Global Projects)

Loading .. Please Wait!!

Managing Unit/Programme-Level Risk (Country Office)

Loading .. Please Wait!!

Managing Unit/Programme-Level Risk (Regional/Central Bureaux)

Loading .. Please Wait!!

Managing Corporate Risk

Loading .. Please Wait!!
Language English | Español | Français
Page Properties
Key Words
None
Focal Point
Nesreen Al-Hebshi
Effective Date
13/03/2019
Planned Review Date
13/03/2021
Summary of Changes/Comments
October 29, 2021 - The ERM policy was updated to 1) modify risks-sub categories and 2) launch UNDP’s Risk Appetite Statement (RAS) which aims to create a risk-enabled culture within UNDP, where risk-based decisions are taken, and opportunities are pursued according to the needs and circumstances of the project or programme, our development partners, and the resources and skills available.

July 08, 2020 - Clause 4.1 and Appendix 2 of the ERM policy were modified to 1) add additional risks-sub categories and 2) remove BOA, JIU as part of the three lines of defence.

May 01, 2019 - The Risk Committee TORs are now available in the Managing Corporate Risk procedure table.

March 13, 2019 - The updated Enterprise Risk Management policy and procedures, which are now available in English, French and Spanish, call for a change in how UNDP collectively approaches risk management in order to become a smarter and more agile organization. They provide a roadmap for moving from risk averse to responsible risk taking practices. To access the Spanish and French versions, click on the relevant language tabs.

October 27, 2017 - The ERM policy has been supplemented with clarification of the end-to-end risk management process to simplify application. The business process provides a summary of risk management at all levels of the Organizational and the risk escalation process. It also provides information on linkages between risk management and and how this could be mainstreamed in most key business processes within the Organization. 
Version#
7