Search
Policy Areas

Recently updated

Filter and Sort

Recently updated

The Cybersecurity Standard on Cloud Acquisition, Maintenance, and Termination of Cloud Services offers guidelines, security controls and other considerations to securing UNDP data stored on cloud services platforms throughout their lifecycle, from acquisition to maintenance to termination. The objectives of the new standard are to:Protect sensitive data and systems from unauthorized access, use, disclosure, disruption, modification, or destruction.Remain cognizant of data privacy regulations and industry standards.Reduce UNDP’s risk exposure to cloud-related security incidents.Ensure cloud ser ...

The Cybersecurity Standard on Cloud Acquisition, Maintenance, and Termination of Cloud Services offers guidelines, security controls and other considerations to securing UNDP data stored on cloud services platforms throughout their lifecycle, from acquisition to maintenance to termination. The objectives of the new standard are to:

  • Protect sensitive data and systems from unauthorized access, use, disclosure, disruption, modification, or destruction.
  • Remain cognizant of data privacy regulations and industry standards.
  • Reduce UNDP’s risk exposure to cloud-related security incidents.
  • Ensure cloud services are appropriately secured and managed throughout their lifecycle.

The Business Continuity Management policy has been streamlined and updated to:Align with the UN Organizational Resilience Management System on training requirements.Clarify the process of conducting Risk Assessment at HQ NY and Offices/Units.Confirm that sub-offices are included in country office (CO) Business Continuity Plans (BCPs).Clarify the BCP approval process based on current practice, including the support role of the Management Specialist in BMS.The Business Continuity Planning procedure and the Business Continuity Management User Guide have been aligned with the updated Business Cont ...

The Business Continuity Management policy has been streamlined and updated to:

  1. Align with the UN Organizational Resilience Management System on training requirements.
  2. Clarify the process of conducting Risk Assessment at HQ NY and Offices/Units.
  3. Confirm that sub-offices are included in country office (CO) Business Continuity Plans (BCPs).
  4. Clarify the BCP approval process based on current practice, including the support role of the Management Specialist in BMS.

The Business Continuity Planning procedure and the Business Continuity Management User Guide have been aligned with the updated Business Continuity Management policy.

The policy and procedure and the Project Management Criteria for Designation of Intergovernmental Organizations have been updated to incorporate references to portfolio in alignment with the Portfolio Policy as a new delivery instrument.

The Advance Payment Bank Guarantee form is now available in French 

The policy has been updated to incorporate language adjustments for clarity and in alignment with existing UNSMS policies and the following updates to the ‘Other travel related information’ section:

  • The ceilings on the maximum number of passengers per commercial flight have been adjusted and Bureau Directors have been added to the line of approval in alignment with the UNDP’s Framework of Accountability for Security policy
  • Approval from the BMS Director will be required for more than 30 personnel on the same commercial flight. 

The Performance Security Form is now available in French.

 

The policy has been updated to incorporate references to portfolio in alignment with the Portfolio Policy as a new delivery instrument.

The policy has been updated to introduce the Portfolio Policy as a new delivery instrument. A new Formulate Portfolios procedure is published in the policy page which includes the steps necessary to design and initiate portfolios. The previous portfolio model (aggregation of projects) is now retired from the policy.