Institutional capacity
IMS V5.1
The operating system behind every function
Doc Code WPD-IMS-001 — Board-approved, effective June 2026. It frames every Tier-2 policy and Tier-3 SOP, with no policy content duplicated.
Financial Management
- Segregation of duties — no single individual controls the full financial cycle.
- Dual-signatory requirement for all bank transactions.
- Donor-specific ledgers; monthly reconciliation and quarterly reporting to the Board.
- Gender-responsive budgeting in every project budget.
- Full EAD registration and FATF-aligned beneficiary verification.
- Annual external audit by an independent accredited firm.
Procurement & Asset Management
- Transparent, competitive threshold matrix with segregation between initiator, evaluator, and approver; compliance with UNGM, ADS 303, PRAG, and Smart Rules.
Procurement notices. Tenders, requests for quotation (RFQs) and consultancy calls are published on this website when open; there are no open notices at present. Suppliers and consultants may register interest at contact@waddan.org.
Human Resources
- Eight-grade structure (G1–G8). Merit-based recruitment with a 30–50% female representation target. Signed Code of Conduct, PSEA, and COI declarations before Day 1, plus police clearance and enhanced vetting for community- and child-facing roles.
Monitoring, Evaluation, Accountability & Learning
- Eight-phase Project Cycle Management, a Results Chain framework, and indicators disaggregated by gender, age, disability, and geography. Grievance Redress Mechanism and AAP commitments aligned with IASC and CHS.
Enterprise Risk Management & Internal Audit
- Board-approved Risk Appetite Statement across ten risk categories, a quarterly Risk Register, and Board notification of critical risks within 72 hours. Internal audit reports to the Finance & Audit Committee.
Safeguarding, PSEA & Child Protection
- Absolute zero tolerance for sexual exploitation, abuse, harassment, and child abuse. Confidential channels: Safeguarding Focal Person, dedicated email, physical complaint boxes, direct access to the Board Chair, and — from Phase 2 — an external anonymous hotline. Full non-retaliation protection.
AI Governance, Data Protection & Digital Systems
- All AI outputs reviewed by a qualified human; beneficiary data never entered into public AI tools; bias screening before deployment. Integrated ERP/MIS is a Phase 2 priority.
Cross-Cutting Compliance Framework
- 27 Tier-2 Board-approved policies including Anti-Fraud & Anti-Bribery, Whistleblower Protection, Health Safety & Security, Partnership Due Diligence, Child Labour Prohibition, Modern Slavery, AML/CFT & Sanctions, Environmental & Social Safeguards, Human Rights, Localization, Disability Inclusion, and DEI.