Ms Lynne Embleton:

It is designed to have fully independent and separate systems, so if one fails, the other works. What is common practice is to allow traffic over both to avoid a situation whereby one system lies dormant and then fails at the point it is needed. We flip between the two to enable us to ensure both systems are working, which is why a main failure and a backup failure should not have happened.