RR-12 RR-12-03-01 — PTC Back Office Server Operations
This process outlines the operations of the Positive Train Control (PTC) Back Office Server for a US Class I freight railroad, ensuring safe and efficient train movements by managing PTC system data and configurations.
🗺 BPMN Process Flow
Click diagram to zoom & pan • Scroll to zoom • Drag to pan • Download SVG
📋 Process Attributes
| Process ID | RR-12-03-01 |
|---|---|
| Domain Family | CORPORATE |
| L1 Domain | Technology, Data & Cybersecurity |
| L2 Process Group | PTC Back Office Server Operations |
| Trigger | Initiated by a scheduled maintenance window or upon detection of an anomaly in the PTC system performance. |
| Outcome | Successful completion ensures that the PTC Back Office Server is operational, maintaining safety protocols and enabling seamless train operations. |
| Systems | NetControl Cybersecurity — secure-by-design approach (unbranded) |
| Regulatory Hooks | 49 CFR Part 232 GCOR 6.28 |
📋 L4 Process Steps
| Step | Name | Role | System | Input | Output | KPI | Pain Point / Risk | Decision? | Exception? |
|---|---|---|---|---|---|---|---|---|---|
| 1.1 | System Health Check | Enterprise Architect / Platform Owner | NetControl | Health status report from NetControl | Health check report | System uptime above 99% | Inaccurate health data leading to undetected issues. | N | Y |
| 1.2 | Configuration Review | Enterprise Architect / Platform Owner | NetControl | Current configuration settings | Updated configuration settings | Configurations updated within 48 hours of detection | Outdated configurations causing system inefficiencies. | Y | N |
| 1.3 | Data Backup | Enterprise Architect / Platform Owner | NetControl | Current PTC data | Backup of PTC data | Backups completed daily | Data loss due to failed backups. | N | Y |
| 1.4 | Security Audit | CIO | Cybersecurity — secure-by-design approach (unbranded) | Audit checklist | Audit report | Audits completed monthly | Security vulnerabilities leading to potential breaches. | Y | N |
| 1.5 | System Update | Enterprise Architect / Platform Owner | NetControl | Software update package | Updated software version | Updates applied within 7 days of release | Delayed updates causing system obsolescence. | Y | N |
| 1.6 | Performance Monitoring | Enterprise Architect / Platform Owner | NetControl | Real-time performance data | Performance report | Response time below 2 seconds | Slow response times affecting train operations. | N | Y |
| 1.7 | Incident Reporting | Enterprise Architect / Platform Owner | NetControl | Incident log | Incident report | Incidents reported within 30 minutes of occurrence | Delayed reporting leading to prolonged impact. | Y | N |
| 1.8 | Training Session | Enterprise Architect / Platform Owner | NetControl | Training materials | Training completion certificate | 100% of staff trained annually | Untrained personnel leading to operational errors. | N | Y |
| 1.9 | Compliance Check | Enterprise Architect / Platform Owner | NetControl | Regulatory guidelines | Compliance report | 100% compliance with regulations | Non-compliance leading to fines and legal issues. | Y | N |
| 1.10 | System Optimization | Enterprise Architect / Platform Owner | NetControl | Optimization recommendations | Optimized system configuration | Optimization completed within 30 days of identification | Suboptimal configurations affecting performance. | Y | N |
| 1.11 | Incident Resolution | Enterprise Architect / Platform Owner | NetControl | Incident report | Resolution plan and status update | Incidents resolved within 24 hours | Unresolved incidents leading to system downtime. | Y | N |
| 1.12 | Post-Maintenance Review | Enterprise Architect / Platform Owner | NetControl | Maintenance log | Post-maintenance review report | Review completed within 7 days of maintenance | Omissions in post-maintenance checks leading to undetected issues. | N | Y |
📊 KPIs & Risk Register
KPIs
System uptime above 99% Configurations updated within 48 hours of detection Backups completed daily Audits completed monthly Updates applied within 7 days of release Response time below 2 seconds Incidents reported within 30 minutes of occurrence 100% of staff trained annually 100% compliance with regulations Optimization completed within 30 days of identification Incidents resolved within 24 hours Review completed within 7 days of maintenance
Key Risks
System downtime due to failed health checks Security breaches leading to unauthorized access Data loss from backup failures Non-compliance with regulatory requirements Operational errors due to untrained personnel
Swim Lanes
Enterprise Architect / Platform Owner · 1.1, 1.2, 1.4, 1.6, 1.8, 1.9 CIO · 1.3, 1.5, 1.7, 1.10, 1.11, 1.12