This policy describes principles and rules for accessing UNFPA data and systems. The policy aims to: provide rules for user provisioning and deprovisioning; and regulate authentication, logging, and review for standard and privileged users.

This policy describes principles and rules for standard and critical third parties providing digital services, and describes contract obligations based on risks, establishing a shared responsibility model for managing them. The policy aims to: as per their classification, provide ICT risk evaluation rules for standard and critical providers of digital services; establish contract obligations based on evaluated risks for providers; and describe a shared responsibility model for managing providers.