Programme and Operations
Policies and Procedures
Search
icon-language English icon-global Locations
Policy Areas

Programme and Project Management

Crisis Response

Financial Resources Management

Human Resources Management

Procurement

Partnerships

Administrative Services

Accountability

Information and Communications Technology

Security

Information Security Policy

Effective Date

Oct 08, 2026

Summary of Changes

A new Standard Operating Procedure: Temporary Information Security Policy (ISP) Waivers for Use of Non-Corporate SaaS Platforms has been issued to operationalize the existing waiver provisions of the UNDP Information Security Policy for the temporary use of non-corporate Software-as-a-Service (SaaS) platforms acquired under vendor End-User License Agreements. The Standard Operating Procedure establishes a documented, risk-based process for Information Security Policy waivers, reaffirms that corporately approved SaaS platforms remain the preferred option, and clarifies that such waivers do not replace other applicable corporate review and approval requirements. The Standard Operating Procedure supports the UNDP's efforts to strengthen governance and oversight of non-corporate SaaS solutions through documented risk acceptance, management oversight, and the secure, temporary use of approved exceptions.

Evaluation Policy

Effective Date

Sep 30, 2026

Summary of Changes

The Evaluation Guidelines have been revised to align with the UNDP Evaluation Policy 2025-2030 and provide more practical guidance for commissioning, managing, conducting, and using evaluations. Key updates include: (i) a new structure organized around the evaluation process to improve usability and navigation; (ii) strengthened guidance on the responsible and transparent use of artificial intelligence in evaluation activities; (iii) updated requirements related to evaluation thresholds, reporting, and the quality assessment system; and (iv) an increased emphasis on the use of evaluation findings to inform decision-making, organizational learning, and programme improvement.

Solicitation

Effective Date

Sep 17, 2026

Summary of Changes

The Bid Security Form has been updated to reference the International Chamber of Commerce (ICC) Publication No. 758, Uniform Rules for Demand Guarantees (URDG 758), aligning the form with internationally recognized banking standards for demand guarantees. This update enhances legal certainty, promotes consistent interpretation and application across jurisdictions, reduces the risk of disputes, and facilitates broader acceptance by issuing banks, while preserving UN privileges and immunities and the specific exclusions set out in the form.

UNDP-supported Guarantees

Effective Date

Sep 15, 2026

Summary of Changes

The UNDP-supported Guarantees Policy has been updated to allow UNCDF to apply its own Guarantees Policy (as outlined in the UNCDF Supplementary Guidelines to the UNDP Programme and Operations Policies and Procedures (POPP)) when engaged as a Responsible Party on a UNDP project involving a UNDP-supported guarantee. This update provides a clear framework for joint UNDP-UNCDF guarantee operations and resolves previous policy incompatibilities between the two organizations. Under this arrangement, UNCDF will be responsible for the design, implementation, and management of guarantees, including technical, risk, fiduciary, and monitoring functions, in accordance with its established guarantees policies and procedures. The change expands implementation options for UNDP-supported guarantees and strengthens collaboration to help mobilize financing for sustainable development outcomes. The UNDP-supported Guarantees Operational Manual has also been updated to reflect the policy update.

Internal Control Framework

Effective Date

Sep 10, 2026

Summary of Changes

The Internal Control Framework Operational Guide has been updated to include the following three changes:

  1. correcting the name of a Quantum role in Section 2.1, point 3. This correction clarifies that for internal supplier registrations, Buyers are not assigned an IDAM Supplier Maintenance supplementary role (L1), but rather a UN Register Suppliers role;
  2. footnote 9 in the same section has been updated to reflect a new timeline for implementation of a revised process to 2027; and
  3. links to expired UNall articles have been refreshed for Project Closure Workbench and Position Management references.

Safe Management

Effective Date

Jul 22, 2026

Summary of Changes

The Safe Management policy has been reviewed with no change needed.

Non-Reimbursable Loan Agreements

Effective Date

Jul 13, 2026

Summary of Changes

Steps 13 and 14 of the Non-Reimbursable Loan Agreements procedure have been updated to replace the GSSC registration process with Quantum. The responsible party for the registration process has been updated from OHR to the Receiving Office Bureau and IDAM Focal point.

Enterprise Risk Management

Effective Date

Jul 09, 2026

Summary of Changes

The Enterprise Risk Management policy and the Risk Committee Terms of Reference have been updated to remove references to the Security Management Group (SMG) and align with the updated Crisis Management Workflow for Headquarters. These updates reflect the dissolution of the Security Management Group (SMG), as its functions were duplicative of existing actors and mechanisms, including the Security Office (SO), the Crisis Operations Group (COG), and the Senior Emergency Policy Team (SEPT). In crisis situations at Headquarters in New York, UNDP engages directly with UN system-wide crisis management structures through established roles, with the SO Director participating in the COG and senior UNDP leadership representing the organization at the SEPT.

Business Continuity Management

Effective Date

Jul 09, 2026

Summary of Changes

The Business Continuity Management policy and the Business Continuity Management User Guide have been updated to remove references to the Security Management Group (SMG) and align with the updated Crisis Management Workflow for Headquarters. These updates reflect the dissolution of the Security Management Group (SMG), as its functions were duplicative of existing actors and mechanisms, including the Security Office (SO), the Crisis Operations Group (COG), and the Senior Emergency Policy Team (SEPT). In crisis situations at Headquarters in New York, UNDP engages directly with UN system-wide crisis management structures through established roles, with the SO Director participating in the COG and senior UNDP leadership representing the organization at the SEPT.

Subscribe to