June 28, 2022 - The Enterprise Risk Management (ERM) policy has been harmonized with the Social and Environmental Standards (SES) policy. The risk sub-categories in the Quantum + corporate planning system (capturing programme level risks) and in the Atlas project risk registers are now fully aligned with the project-level social and environmental standards. To align the risk entry systems, a slight rewording of ten risk sub-categories has been made and the risk sub-category on “Cultural Heritage” has been re-introduced in the relevant annexes of the ERM policy, Risk Appetite Statement and Risk Appetite Statement Guidance.
October 29, 2021 - The ERM policy was updated to 1) modify risks-sub categories and 2) launch UNDP’s Risk Appetite Statement (RAS) which aims to create a risk-enabled culture within UNDP, where risk-based decisions are taken, and opportunities are pursued according to the needs and circumstances of the project or programme, our development partners, and the resources and skills available.
July 08, 2020 - Clause 4.1 and Appendix 2 of the ERM policy were modified to 1) add additional risks-sub categories and 2) remove BOA, JIU as part of the three lines of defence.
May 01, 2019 - The Risk Committee TORs are now available in the Managing Corporate Risk procedure table.
March 13, 2019 - The updated Enterprise Risk Management policy and procedures, which are now available in English, French and Spanish, call for a change in how UNDP collectively approaches risk management in order to become a smarter and more agile organization. They provide a roadmap for moving from risk averse to responsible risk taking practices. To access the Spanish and French versions, click on the relevant language tabs.
October 27, 2017 - The ERM policy has been supplemented with clarification of the end-to-end risk management process to simplify application. The business process provides a summary of risk management at all levels of the Organizational and the risk escalation process. It also provides information on linkages between risk management and and how this could be mainstreamed in most key business processes within the Organization.
