IG: Effectiveness of DOT IT security practices declines