Search
Policy Areas

Recently updated

Filter and Sort

Recently updated

The following policies have been updated to reflect UNDP’s transition to its new cloud-based management platform Quantum in January 2023, replacing its previous ATLAS system. ICT Disaster Recovery Standards for UNDP Offices and the related ICT Disaster Recovery Plan templateElectronic Funds Transfer StandardsElectronic Signatures and the related List of systems and tools for electronic systems and approvalsQuantum User Access Standards
Disbursing Funds (Making Payments) | Prepayments | Regular Maintenance Accounts Payable | Refunds to Donors | Financial Statements | Record Retention, Data Security and Contingency | Certified Financial Reports | Maintenance and Usage of Chart of Accounts | Core Contributions | Non-Core Contributions | Revenue Management for Joint Programming | US Letter of Credit (LOC) Agreements | Accounts Receivable | Government Contribution to Local Office Costs (GLOC) from LIC and MIC | Inventory Management | Designation and Responsibilities of Signatories | Establishment and Use of Electronic Banking Systems | Opening and Closing of Bank Accounts | Cash Operations | Petty Cash Fund for Management Project (PCF) | Project Cash Advance (PCA) | Project Cash on Hand for DIM Projects (PCH) | Bank Account Reconciliation | Management of Cash Planning/Forecasting of Cash Flows | Management of Zero-Balance Account System | UNFCU Share Account Management | Supplier Banking Information Set-up for IBAN | Electronic Funds Transfer Standards | Management of Petty Cash | Handling of Cash and Receipts Treasury | Project Petty Cash Fund (PPCF) | GMS Fee Set-up and Collection | Universal Price List (UPL) and Local Price List (LPL) | Multiple Funding Lines for Positions | Use of UPL and LPL | Harmonized Conceptual Funding Framework and Cost Recovery Methodology | Cost Recovery from Other Resources - GMS | Expenditure of Income Accrued from Cost Recovery | Government Contributions from Net Contributing Countries (NCCs) and High Middle-Income Countries (High-MICs) | Planning and Paying for Delivery Enabling Services to Projects | Service Clearing Account (SCA): Charging, Billing and Fee Collection | UN Agency Services | Pass-Through Fund Management: UNDP as a Participating UN Organization | Parallel Fund Management | Pass-Through Fund Management: UNDP as a Participating UN Organization | Pass-Through Management: UNDP as Administrative Agent (AA) | Pooled Fund Management
Disbursing Funds (Making Payments) | Prepayments | Regular Maintenance Accounts Payable | Refunds to Donors | Financial Statements | Record Retention, Data Security and Contingency | Certified Financial Reports | Maintenance and Usage of Chart of Accounts | Core Contributions | Non-Core Contributions | Revenue Management for Joint Programming | US Letter of Credit (LOC) Agreements | Accounts Receivable | Government Contribution to Local Office Costs (GLOC) from LIC and MIC | Inventory Management | Designation and Responsibilities of Signatories | Establishment and Use of Electronic Banking Systems | Opening and Closing of Bank Accounts | Cash Operations | Petty Cash Fund for Management Project (PCF) | Project Cash Advance (PCA) | Project Cash on Hand for DIM Projects (PCH) | Bank Account Reconciliation | Management of Cash Planning/Forecasting of Cash Flows | Management of Zero-Balance Account System | UNFCU Share Account Management | Supplier Banking Information Set-up for IBAN | Electronic Funds Transfer Standards | Management of Petty Cash | Handling of Cash and Receipts Treasury | Project Petty Cash Fund (PPCF) | GMS Fee Set-up and Collection | Universal Price List (UPL) and Local Price List (LPL) | Multiple Funding Lines for Positions | Use of UPL and LPL | Harmonized Conceptual Funding Framework and Cost Recovery Methodology | Cost Recovery from Other Resources - GMS | Expenditure of Income Accrued from Cost Recovery | Government Contributions from Net Contributing Countries (NCCs) and High Middle-Income Countries (High-MICs) | Planning and Paying for Delivery Enabling Services to Projects | Service Clearing Account (SCA): Charging, Billing and Fee Collection | UN Agency Services | Pass-Through Fund Management: UNDP as a Participating UN Organization | Parallel Fund Management | Pass-Through Fund Management: UNDP as a Participating UN Organization | Pass-Through Management: UNDP as Administrative Agent (AA) | Pooled Fund Management

9 January 2023

Expense Management | Financial Closure of Development Projects and Trust Funds | Statutory Financial Reporting | Corporate Operations and Information Management | Regular Resources | Other Resources | Inventory Management | Banking Arrangement | Cash Arrangement | Cash Management | Enterprise Solutions | Cost Recovery from Programmes funded by Regular and Other Resources | Direct Project Costing | UN Agency Services | Joint Programming

The following policies and procedures have been updated to reflect UNDP's transition to its new cloud-based management platform Quantum in January 2023, replacing its previous ATLAS system. Expense Management Disbursing Funds (Making Payments) (policy and procedures)Prepayments (policy and procedures)Regular Maintenance Accounts Payable (policy and procedures) Financial Closure of Development Projects and Trust FundsRefunds to Donors (policy only) Financial Operations ManagementFinancial Statements (policy only)Record Retention, Data Security and Contingency (policy only)Certified Financial ...

The following policies and procedures have been updated to reflect UNDP's transition to its new cloud-based management platform Quantum in January 2023, replacing its previous ATLAS system. Expense Management Disbursing Funds (Making Payments) (policy and procedures)Prepayments (policy and procedures)Regular Maintenance Accounts Payable (policy and procedures) Financial Closure of Development Projects and Trust FundsRefunds to Donors (policy only) Financial Operations ManagementFinancial Statements (policy only)Record Retention, Data Security and Contingency (policy only)Certified Financial Reports (policy only)Maintenance and usage of Chart of Accounts (policy and procedures) Pipeline and Revenue ManagementCore Contributions (policy and procedures)Non-Core Contributions (policy and procedures)Revenue Management for Joint Programming (policy only)US Letter of Credit (LOC) Agreements (policy and procedures)Accounts Receivable (policy only)Government Contribution to Local Office Costs (GLOC) from LIC and MIC (policy and procedures) Inventory Management Inventory Management (policy and procedures) Cash Banking and InvestmentDesignation and Responsibilities of Signatories (policy and procedures)Establishment and Use of Electronic Banking Systems (policy and procedures)Opening and Closing of Bank Accounts (policy and procedures)Cash Operations (policy only)Petty Cash Fund for Management Project (PCF) (policy and procedures)Project Cash Advance (PCA) (policy and procedures)Project Cash on Hand for DIM Projects (PCH) (policy only)Bank Account Reconciliation (policy and procedures)Management of Cash Planning/Forecasting of Cash Flows (policy and procedures)Management of Zero-Balance Account System (procedures only)UNFCU Share Account Management (policy and procedures)Supplier Banking Information Set-up for IBAN (procedures only)Electronic Funds Transfer Standards (policy only in ICT section)Management of Petty Cash (policy only)  Handling of Cash and Receipts Treasury (policy and procedures)Project Petty Cash Fund (PPCF) (policy and procedures) Resource Planning and Cost RecoveryGMS Fee Set-up and CollectionUniversal Price List (UPL) and Local Price List (LPL) (policy and procedures)Multiple Funding Lines for Positions (policy and procedures)Use of UPL and LPL (policy and procedures)Harmonized Conceptual Funding Framework and Cost Recovery MethodologyCost Recovery from Other Resources - GMSExpenditure of Income Accrued from Cost RecoveryGovernment Contributions from Net Contributing Countries (NCCs) and High Middle-Income Countries (High-MICs)Planning and Paying for Delivery Enabling Services to Projects (procedures only)Service Clearance Account (SCA), Charging, Billing and Fee Collection (policy and procedures)UN Agency Services (policy and procedures) Financial Management and Implementation ModalitiesPass-Through Fund Management: UNDP as a Participating UN Organization (policy only)Parallel Fund Management (policy only)Pass-Through Fund Management: UNDP as a Participating UN Organization (policy only)Pass-Through Management: UNDP as Administrative Agent (AA) (policy only)Pooled Fund Management (policy and procedures)

The policy was changed in order to implement industry best practices in cybersecurity for the protection of personally identifiable information. These changes are compliant with ISO 27701 and help implement the requirements of tithe UNDP privacy policy for the protection of personal data.- The new version of the UNDP Information Security Policy takes into account the provisions of the new UNDP Data Protection and Privacy policy as well as the recommended industry best practices for managing personally identifiable information (PII) as defined in ISO 27701.- The new version designates the UNDP ...

The policy was changed in order to implement industry best practices in cybersecurity for the protection of personally identifiable information. These changes are compliant with ISO 27701 and help implement the requirements of tithe UNDP privacy policy for the protection of personal data.
- The new version of the UNDP Information Security Policy takes into account the provisions of the new UNDP Data Protection and Privacy policy as well as the recommended industry best practices for managing personally identifiable information (PII) as defined in ISO 27701.
- The new version designates the UNDP Chief Information Security Officer role as the party responsible for governance and monitoring of privacy safeguards within the BMS/ITM. It also explicitly designates BMS/ITM as a custodian (aka PII Processor) and not the owner of the PII data.
- The new policy section on PII also contains policy statements compliant with the ISO 27701 privacy standard for industry best practices.


​The ICT Standards policy, has been updated to include the following: 1. Overall review and update of the policy 2. User equipment standards update 3. Standard software section update 4. ICT Support services- section updated 5. Online Subscriptions and Cloud Services section added 6. Application development standards– section added 7. Assets Disposal section added 8. Azure cloud subsection added 9. Guidance on the use of MS Azure Annex added.

​The purpose of the Information Classification and Handling policy is to guide project/programme implementation when handling data, to be embedded throughout the data lifecycle to ensure UNDP implements the highest ethical standards for data protection and privacy. Protection of personal data is essential to upholding fundamental rights to privacy and the UN system-wide personal data protection and privacy principles. Strong policies on information handling and classification and on personal data protection and privacy are critical for operating efficiently, considering opportunities and risks ...

​The purpose of the Information Classification and Handling policy is to guide project/programme implementation when handling data, to be embedded throughout the data lifecycle to ensure UNDP implements the highest ethical standards for data protection and privacy. Protection of personal data is essential to upholding fundamental rights to privacy and the UN system-wide personal data protection and privacy principles. Strong policies on information handling and classification and on personal data protection and privacy are critical for operating efficiently, considering opportunities and risks in the use of personal data, including in combination with evolving technologies.

​The purpose of the Personal Data Protection and Privacy policy is to guide project/programme implementation when handling data, to be embedded throughout the data lifecycle to ensure UNDP implements the highest ethical standards for data protection and privacy. Protection of personal data is essential to upholding fundamental rights to privacy and the UN system-wide personal data protection and privacy principles. Strong policies on personal data protection and privacy, and on information handling and classification are critical for operating efficiently, considering opportunities and risks i ...

​The purpose of the Personal Data Protection and Privacy policy is to guide project/programme implementation when handling data, to be embedded throughout the data lifecycle to ensure UNDP implements the highest ethical standards for data protection and privacy. Protection of personal data is essential to upholding fundamental rights to privacy and the UN system-wide personal data protection and privacy principles. Strong policies on personal data protection and privacy, and on information handling and classification are critical for operating efficiently, considering opportunities and risks in the use of personal data, including in combination with evolving technologies.

​Paragraphs 10, 45, 46, 60 and 55 of the policy have been updated in response to UNBOA audit recommendations to clarify the responsibilities of offices in creating their disaster recovery plans, including documenting any arrangements made with cloud providers.

​The framework outlines the technical standards and processes that Country Offices and all UNDP Business Units should follow for application development. Furthermore, it provides a governance framework for application development in UNDP in accordance with industry standards while balancing the need of corporate standards with the need to innovate locally and across business units. This allows Business Units to access technical, advisory, and contractual corporate support resources throughout the application’s lifecycle. The framework also addresses and closes OAI audit recommendation 2277-1.

​The main Bring Your own Devices and Acceptable Usage of ICT Resources policy changes are as follows:

  • Making undp.org email mandatory to all UNDP personnel;
  • Prohibiting access to malicious hacking/cybercriminal websites and websites which contravene UN values;
  • A clearer naming convention for emails addresses;
  • Introduction of a new state of the art password policy, using sentences, and safe logon procedures.

These changes will also close a 2020 UNBOA recommendation.