In all the business I have had I always worried about a good Plan B. Namely what could go wrong and how would I deal with it. For example in one company we had a hub in New Jersey. I had battery back up but one nigh JCP&L, as it would do ever so more frequently, went down. For hours. I scrambled for a motor generator and just in time got it to work. Next day we got a complete back up system and then I moved it to Prague since the US grid was unreliable.
Another case was a system where the connectors installed were slightly miss-matched. It took a few weeks of just tweaking to see the problem and then fixed in a day.
One must always consider the catastrophic failure and plan for restoral. When using a vendor, check them out in detail. It seems clear that the current DoT and FAA mess was one of no Plan B. No understanding of failure mode. I did some work in the nuclear weapons space, and we had to provide a full fault tree analysis. Then it was Red Teamed to see what we missed. I would love to see how the current mess up at the FAA was handled. Top management must have the competence and experience to oversee and insure success. Pure politicians are useless.

