Business Continuity Management

Skip to main content

Programme and Operations
Policies and Procedures

Policy Areas
What's new
Index
Glossary

Search

Français
Español

Login

Policy Areas
What's new
Index
Glossary

English

Locations

Policy Areas

Programme and Project Management
Crisis Response
- Standard Operating Procedure for Crisis Response and Recovery
  - Standard Operating Procedure for Crisis Response and Recovery
- Financial Resources for Response
  - Allocation of TRAC 3 Resources for Crisis Engagements
Financial Resources Management
Human Resources Management
Procurement
Partnerships
Administrative Services
Accountability
Information and Communications Technology
Security

Select Language

Programme and Project Management
Crisis Response
Financial Resources Management
Human Resources Management
Procurement
Partnerships
Administrative Services
Accountability
Information and Communications Technology
Security

Programme and Project Management

Programming Standards
Design
Implement
Close
- Close and Transition

Crisis Response

Standard Operating Procedure for Crisis Response and Recovery
- Standard Operating Procedure for Crisis Response and Recovery
Financial Resources for Response
- Allocation of TRAC 3 Resources for Crisis Engagements

Financial Resources Management

Inventory Management
- Inventory Management
Cash Banking and Investment
Financial Closure of Development Projects and Trust Funds
Financial Management and Implementation Modalities
Financial Operations Management
- Corporate Operations and Information Management
- Statutory Financial Reporting
Pipeline and Revenue Management
Expense Management
Resource Planning and Cost Recovery
Working with External Auditors
- Working with External Auditors

Human Resources Management

Duties, Obligations and Privileges
- Standards of Conduct
  - UNDP Legal Framework for Addressing Non-Compliance with UN Standards of Conduct
- Harassment, Sexual Harassment, Discrimination, and Abuse of Authority
  - Harassment, Sexual Harassment, Discrimination, and Abuse of Authority
Classification of Posts
- Job Evaluation
Salaries and Related Allowances
Appointment and Promotion
Annual and Special Leave
Social Security
Travel and Removal Expenses
- Entitlement Travel
- Relocation Shipment
  - Relocation Shipment
Separation from Services
- Entitlements upon Separation
- Types of Separation
Disciplinary Measures and Appeals
- UNDP Legal Framework for Addressing Non-Compliance with UN Standards of Conduct
Non-Staff
Workforce Management
- Organizational Unit Restructuring
  - Organizational Unit Restructuring
- Performance Management
  - Performance Management and Development
  - Probation upon Appointment

Procurement

Procurement Overview
Procurement Strategy and Planning
- Procurement Forecasting and Delivery
- Transactional Procurement Strategies and Procurement Planning
Requisition
- Requisition and Procurement of Goods, Civil Works and Services
Sourcing of Suppliers
- Sourcing and Market Research
- Vendor Sanctions
Procurement Methods
- Procurement Methods
Innovation, CSO engagement
Solicitation Process
Evaluation of Offers and Pre-award Negotiations
- Evaluation of Offers
- Pre-Award Negotiations
Procurement Review Committees
- Procurement Oversight and Procurement Review Committees
Award and Management of Contract
Construction Works
- Construction Works
Individual Contract
- Individual Contract
Long Term Agreements (LTAs) and Cooperation with UN Entities
- Long Term Agreements (LTAs) and Cooperation with UN Entities

Partnerships

Managing Partnerships
- Managing Partnerships
Private Sector
- Policy on Due Diligence and Partnerships with the Private Sector
- Private Sector Partnerships
Foundations
- Foundations

Administrative Services

Asset Management - Property, Plant and Equipment
Asset Management (Intangible Assets)
- Intangible Assets
Vehicle Management
- Vehicle Management
Lease Management (Premises and Equipment)
Management of Local Presences
- Establishing UNDP-supported presence outside a country office
- Closing a Local Presence
Duty Travel
Corporate Purchasing Card
- Corporate Purchasing Card

Accountability

Accountability System Policy
- Accountability System Policy
Information Disclosure
- Information Disclosure
Internal Control Framework (ICF)
- Internal Control Framework
- Anti-Fraud Policy
Risk Management
- Enterprise Risk Management
- Anti-Money Laundering and Countering the Financing of Terrorism Policy
Business Continuity Management
- Business Continuity Management
Delegation of Authorities
- Delegation of Authorities
- Participation and Role of UNDP Delegates at Major International Conferences and Events
Ethics
Evaluation
- Evaluation Policy
Managing Prescriptive Content
- Managing Prescriptive Content

Information and Communications Technology

ICT Security
ICT Oversight
- Change Control and Release Management Standards
Enterprise Solutions
Global Services
- UNDP ICT Standards

Security

Framework of Accountability for Security
- Framework of Accountability for Security
Security Policy
- Security Policy
Commercial Air Travel Safety
- Commercial Air Travel Safety Guidelines

Home
Accountability
Business Continuity Management
Business Continuity Management

Main navigation

Accountability System Policy
- Accountability System Policy
Information Disclosure
- Information Disclosure
Internal Control Framework (ICF)
- Internal Control Framework
- Anti-Fraud Policy
Risk Management
- Enterprise Risk Management
- Anti-Money Laundering and Countering the Financing of Terrorism Policy
Business Continuity Management
- Business Continuity Management
Delegation of Authorities
- Delegation of Authorities
- Participation and Role of UNDP Delegates at Major International Conferences and Events
Ethics
Evaluation
- Evaluation Policy
Managing Prescriptive Content
- Managing Prescriptive Content

Focal Point

Nesreen Al-Hebshi

Effective Date

30/10/2024

Planned Review Date

30/10/2027

Version

5.0

About this policy

UNDP's Business Continuity Management (BCM) policy sets the framework for the organization to respond to internal and external threats and ensures the organization’s preparedness, resilience and ability to continue delivering its mandate when such threats occur.

BCM in UNDP is in line with the UN Organizational Resilience Management System (ORMS) and acts as the emergency management framework for the organization. It includes the IT Disaster Recovery Plan (ITDRP), security plans (which include crisis, incident, and emergency management) and Business Continuity Planning (BCP).

A BCP is based on a Risk Assessment (RA) and Business Impact Analysis (BIAs). They build on existing Enterprise Risk Management policies and country-specific Security Risk Assessments (SRA) while considering the overall organizational mandate and continuation of business.

Latest updates

July 09, 2026 - The Business Continuity Management policy and the Business Continuity Management User Guide have been updated to remove references to the Security Management Group (SMG) and align with the updated Crisis Management Workflow for Headquarters. These updates reflect the dissolution of the Security Management Group (SMG), as its functions were duplicative of existing actors and mechanisms, including the Security Office (SO), the Crisis Operations Group (COG), and the Senior Emergency Policy Team (SEPT). In crisis situations at Headquarters in New York, UNDP engages directly with UN system-wide crisis management structures through established

July 09, 2026 - The Business Continuity Management policy and the Business Continuity Management User Guide have been updated to remove references to the Security Management Group (SMG) and align with the updated Crisis Management Workflow for Headquarters. These updates reflect the dissolution of the Security Management Group (SMG), as its functions were duplicative of existing actors and mechanisms, including the Security Office (SO), the Crisis Operations Group (COG), and the Senior Emergency Policy Team (SEPT). In crisis situations at Headquarters in New York, UNDP engages directly with UN system-wide crisis management structures through established roles, with the SO Director participating in the COG and senior UNDP leadership representing the organization at the SEPT. p tag used here for line break

January 29, 2025 - The updated Business Continuity Plan templates and Business Continuity Management user guide are now available in French and Spanish:

Business Continuity Plan templates: French | Spanish as linked in the relevant steps of the Business Continuity Planning procedure: French | Spanish
Business Continuity Management User Guide: French | Spanish

p tag used here for line break

October 30, 2024 - The Business Continuity Management policy has been streamlined and updated to:

Align with the UN Organizational Resilience Management System on training requirements.
Clarify the process of conducting Risk Assessment at HQ NY and Offices/Units.
Confirm that sub-offices are included in country office (CO) Business Continuity Plans (BCPs).
Clarify the BCP approval process based on current practice, including the support role of the Management Specialist in BMS.

The Business Continuity Planning procedure and the Business Continuity Management User Guide have been aligned with the updated Business Continuity Management policy. p tag used here for line break

March 07, 2024 - The Business Continuity Planning procedure, the Business Continuity Management User Guide and the Disaster Recovery Plan Templateare now available in French and in Spanish:

Business Continuity Planning procedure: French | Spanish
Business Continuity Management User Guide: French | Spanish
Disaster Recovery Plan Template: French | Spanish

p tag used here for line break

September 02, 2021 - The Business Continuity Management policy is now available in French. To access the document, click on the French language tab. p tag used here for line break

December 31, 2020 - The Business Continuity Management policy is now available in Spanish. To access the document, click on the Spanish language tab. p tag used here for line break

January 16, 2018 - The Business Continuity Management policy has been revised is now available in POPP. The revision is mainly editorial and does not include any substantive changes. The revised policy has also Included a reference to UN Organizational Resilience Management System (ORMS) which was approved by UN CEB in 2014. p tag used here for line break

EXPAND

Relevant Regulations and Rules

UNDP Financial Regulations and Rules

Policies

Main Policy

Business Continuity Management Policy (BCM)

DOCX (133.1 KB)

Download

Procedures

Main Procedures

1

Step

Prepare/Review/Update Office/Unit/HQ NY Risk assessment

Responsible Party

BCP focal point

Template/Guideline

Risk Assessment Template

Explanatory Notes

- This includes Country Security Risk Assessment (SRM) prepared and approved by UN Security Management System in country.
- Risk Assessment should be annexed to the BCP.

2

Step

Prepare/Review/Update Office/Unit/HQ NY Business Impact Analysis (BIA)

Responsible Party

BCP focal point

Template/Guideline

Business Impact Analysis Template

Explanatory Notes

- Identify critical business functions and assess the impact from identified risks along with Recovery Time Objectives (RTO) of critical functions along with necessary ICT tools/equipment to continue these functions;
- Identify essential office/unit/bureau documents; keep hard and soft copies in off-site location/OneDrive;
- This is a collective exercise that is done in consultation with senior management;
- Assessment should be annexed to BCP.

3

Step

Prepare/review/update Office/Unit/Bureau BCP document

Responsible Party

BCP focal point

Template/Guideline

Business Continuity Planning (BCP) - All Templates

Disaster Recovery Plan Template

Explanatory Notes

- Based on the Risk Assessment and BIA, review/update existing BCP to ensure inclusion of most recent critical function and critical staffing list with alternates and their contact details;
- Pre-identify off-site location to ensure that in the event of an emergency, Office/Unit/Bureau can operate from the alternative site. Necessary power and ICT connectivity is essential including when/if working from home or from another agency office;
- ICT Disaster Recovery Plan is to be prepared.

4

Step

Share draft BCP with all supporting documents with BMS Directorate

Responsible Party

BCP focal point

Template/Guideline

Explanatory Notes

Via email

5

Step

BMS Directorate review and provide Office/Unit/Bureau any comments

Responsible Party

Template/Guideline

Explanatory Notes

Via email

6

Step

Approve/sign off BCP documents

Responsible Party

Head of Office/Unit/Bureau

Template/Guideline

Explanatory Notes

- All supporting documents are to be annexed to the BCP.

7

Step

Arrange for BCP Test

Responsible Party

Head of Office/Unit/Bureau

Template/Guideline

Business Continuity Management User Guide

Explanatory Notes

- BCP simulation exercise should test the viability of the identified critical functions and procedures in the way that they would be performed in a real crisis/critical incident;
- The test can be conducted to include Office/Unit/Bureau Crisis Management Plan, Business Continuity Plan, and/or ICT Disaster Recovery Plans (i.e. one or several components of the plan);
- Lessons learnt should be drawn from the exercise and the BCP should be modified as necessary.

8

Step

Upload signed BCP and BCP test report

Responsible Party

BCP focal point

Template/Guideline

BCM platform for internal use only

Explanatory Notes

United Nations
Development Programme

Twitter
LinkedIn
Facebook
Threads
Instagram
Youtube

About the Portal
Contact Us
Terms of Use