PROFESSIONAL SERVICES FOR INTERNAL AUDIT OF UNFPA’S USER PROVISIONING&NETWORK ACCESS AUTHENTICATION

DOS is responsible for the internal audit of UNFPA.  It provides the Executive Director with independent, objective assurance and advisory activities as regards the effectiveness of the governance, risk management and control processes and the economic, effective and efficient use of resources, in conformity with International Professional Practices Framework of the Institute of Internal Auditors and the provisions of the Charter of the Division for Oversight Services.  It evaluates and contributes to the improvement of governance, risk management, and control processes and report thereon.  

UNFPA uses a Sun One Directory Server v 5.2 Lightweight Directory Access Protocol (LDAP) directory to authenticate users access to its network environment and several corporate applications such as email and the Cognos based reporting system.   

The Sun directory is updated through the Global Directory application and database, which was developed internally, using Adobe’s ColdFusion v 7 and MySQL v 5.2., running on Linux v 5.6.

The Global Directory maintains personal and contact information about all UNFPA personnel globally. In addition, it contains office location information, office hours, phone numbers, list of holidays and other related information about all UNFPA HQ business units and field offices (regional, sub-regional and country offices). Designated Directory Focal Point staff at HQ business units and field offices is responsible for the maintenance and accuracy of the directory information for their offices.

Requests for the creation of network, email and Atlas accounts (UNFPA’s PeopleSoft based Enterprise Resource planning system) are submitted through the Global Directory application by the Directory Focal Points for approval by designated approvers for each HQ business unit and field office. Requests for email and network accounts are cleared by the Directory Administrator. Special approval may be needed for requests for Atlas accounts with specific access rights. Once these requests are approved, the Global Directory application creates the account, using a ColdFusion LDAP API. .  UNFPA Atlas accounts are created and managed by the United Nations Development Programme (UNDP, which operates the system on behalf of all the agencies utilizing it, based on the requests submitted through a Global Directory to Atlas automated interface.

The Global Directory application is also used to complete and document an annual Atlas access rights verification and for other administrative functions, such as office information verification and email group verification.

The UNFPA Directory Administrator, a staff member of the Management Information Services (MIS) MIS Branch, is responsible for proper administration and operation of the directory software.

The bid shall reach UNFPA’s reception no later than 11 July, 2013 at 17.00pm Copenhagen time (http://www.timeanddate.com/worldclock/city.html?n=69).