Redundancy in Plant SCADA: Designing for High Availability