UNHCR recognizes the absence of a formally documented information security policy.
UNRWA had developed and approved its information security policy as recommended by the Board.
