RR-12 RR-12-06-01 — Field and Mobile Technology
This process outlines the operational procedures for managing and securing mobile technology devices used by rail personnel in the field, ensuring compliance with cybersecurity standards and regulatory requirements.
🗺 BPMN Process Flow
Click diagram to zoom & pan • Scroll to zoom • Drag to pan • Download SVG
📋 Process Attributes
| Process ID | RR-12-06-01 |
|---|---|
| Domain Family | CORPORATE |
| L1 Domain | Technology, Data & Cybersecurity |
| L2 Process Group | Field and Mobile Technology |
| Trigger | Initiation of a new train crew assignment or change in device status (e.g., loss, theft, repair). |
| Outcome | Successful completion ensures secure deployment of mobile technology devices, adherence to cybersecurity policies, and readiness for operational tasks. |
| Systems | NetControl PS Technology (PST) Cybersecurity — 'secure-by-design' approach |
| Regulatory Hooks | 49 CFR Part 232 TSA Security Directive 1580/82-2022-01 series |
📋 L4 Process Steps
| Step | Name | Role | System | Input | Output | KPI | Pain Point / Risk | Decision? | Exception? |
|---|---|---|---|---|---|---|---|---|---|
| 1.1 | Device Assignment | Train Dispatcher | NetControl | Crew assignment details | Assigned device list | Device assignment accuracy rate > 95% | Incorrect device assignments leading to operational delays. | N | N |
| 1.2 | Security Assessment | Enterprise Architect / Platform Owner | Cybersecurity — 'secure-by-design' approach | Assigned device list | Security assessment report | Security compliance rate > 98% | Non-compliant devices posing security risks. | Y | Y |
| 1.3 | Device Configuration | Service Design / Network Planning Analyst | PS Technology (PST) | Security assessment report | Configured device list | Configuration accuracy rate > 90% | Misconfigured devices leading to connectivity issues. | N | Y |
| 1.4 | Training Notification | Train Dispatcher | NetControl | Configured device list | Training notification sent | Training completion rate > 85% | Untrained personnel using devices incorrectly. | N | Y |
| 1.5 | Device Deployment | Locomotive Engineer | NetControl | Training notification sent | Deployed device list | Deployment accuracy rate > 90% | Incorrect deployment causing operational disruptions. | N | Y |
| 1.6 | Monitoring and Reporting | Enterprise Architect / Platform Owner | Cybersecurity — 'secure-by-design' approach | Deployed device list | Monitoring report | Incident detection rate > 95% | Undetected security incidents compromising data integrity. | Y | Y |
| 1.7 | Incident Response | Enterprise Architect / Platform Owner | Cybersecurity — 'secure-by-design' approach | Monitoring report | Incident response plan | Response time < 30 minutes | Delayed responses to security incidents leading to data breaches. | Y | Y |
| 1.8 | Device Maintenance | Service Design / Network Planning Analyst | PS Technology (PST) | Incident response plan | Maintenance schedule | Maintenance adherence rate > 95% | Overdue maintenance causing device failures. | N | Y |
| 1.9 | Audit and Review | Enterprise Architect / Platform Owner | Cybersecurity — 'secure-by-design' approach | Maintenance schedule | Audit report | Audit compliance rate > 90% | Non-compliant audits leading to regulatory penalties. | Y | Y |
| 1.10 | Continuous Improvement | Enterprise Architect / Platform Owner | Cybersecurity — 'secure-by-design' approach | Audit report | Improvement plan | Improvement implementation rate > 80% | Lack of continuous improvement leading to persistent security vulnerabilities. | Y | Y |
| 1.11 | Device Update | Service Design / Network Planning Analyst | PS Technology (PST) | Improvement plan | Updated device list | Update adherence rate > 90% | Outdated devices exposing the network to new threats. | N | Y |
| 1.12 | Final Review and Approval | CIO | Cybersecurity — 'secure-by-design' approach | Updated device list | Approval document | Approval rate > 95% | Non-approval delaying operational readiness. | Y | N |
📊 KPIs & Risk Register
KPIs
Device assignment accuracy rate > 95% Security compliance rate > 98% Configuration accuracy rate > 90% Training completion rate > 85% Deployment accuracy rate > 90% Incident detection rate > 95% Response time < 30 minutes Maintenance adherence rate > 95% Audit compliance rate > 90% Improvement implementation rate > 80% Update adherence rate > 90% Approval rate > 95%
Key Risks
Non-compliant devices posing security risks. Misconfigured devices leading to connectivity issues. Untrained personnel using devices incorrectly. Incorrect deployment causing operational disruptions. Undetected security incidents compromising data integrity.
Swim Lanes
Train Dispatcher · 1.1, 1.4, 1.5 Enterprise Architect / Platform Owner · 1.2, 1.6, 1.7, 1.9, 1.12 Service Design / Network Planning Analyst · 1.3, 1.8, 1.11 Locomotive Engineer · 1.5