Standard ICS Incident Response assumes local forensic data acquisition in the ICS environment and a multi-team approach internal and external responders and subject matter experts. During the current pandemic, we have to find alternatives to this approach that might well lead to an overall more resilient IR in the long run.