Is there a noticeable sudden deviation in behavior?

Is the behavior linked to a known stressor or cause?

Is the communication unclear or hesitant (verbal/non-verbal) ?

Could this behavior lead to operational or safety risk?

Is the organization ready to respond (record patterns and close the loop) ?