Audit of information and communications technology security at the Office of the United Nations High Commissioner for Refugees

There was a need to develop robust information security guidance, conduct user awareness training on information security, strengthen log management, user provisioning and access controls, improve monitoring of network security, conduct periodic technical vulnerability assessments, and map the security assessment results with the remediation measures.