I think this is even scarier, that there can de emergency where sysadmin should manualy fix it. There should be fallbacks and redundancies with muliple levels i

I think this is even scarier, that there can de emergency where sysadmin should manualy fix it. There should be fallbacks and redundancies with muliple levels if this is realy a crytical system. These would should give enough time to transport whatever personnel you need on site to fix things.