If a key performance dashboard suddenly shows a 20% drop in user activity, what structured steps would you take to diagnose the root cause at Gmo?