Backup system connected to prod, that somehow reminds of the Knight Trading debacle. Someone there apparently connected some test code to their prod and they blew up the company in under an hour.
I mean - isnt that how all DR is essentially configured? You need it "somehow" connected to Prod depending on the failover, config, system etc. And in many of these complex systems DR can be on a subsystem etc - not an "all or nothing" approach?