UNHCR recognizes the absence of a formally documented information security policy.
UNHCR concurs with this recommendation which will be addressed in the new information security policy.
