And, finally, they didn't put all their eggs in one basket. The ISIS/standby is using a different means in that the standard probes have ADMs at/near the probe, while the ISIS is (I understand) plumbed traditionally with the sensing as part of the ISIS unit. So if you were to have some kind of catastrophic design flaw that took out every ADM the ISIS should still be running.
Well, something catastrophic obviously happened!