risk management practices decline