How to Detect Operational Drift Before It Becomes an Incident