So theoretically, what kind of contingency should be provided by ATCCs ? A fully redundant and 'hot' contingency facility which can take over in a moment's notice with fully trained staff just waiting for a failure, with each of the hundreds of systems built on completely different software platforms (to mitigate against those code errors) to the main ATCC?
Second question, who pays for it?
Maybe someone should tell the EC?