No, one is not required.
Some are creating such policies while others are injecting short verbiage into existing policies where it seems logical to do so.
I think it is smart to address UDAAP in some shape or form, but your bank size, product mix and complexity should guide you to which way is most appropriate for your shop.
_________________________
I don't repeat gossip, so listen closely...