[jon-wood]

At the scale of companies like this one it should be physically impossible to bring down a critical server and all its backups. That's what offsite backups, preferably on write only media are for.