Reporting crime still matters, but small firms need their own evidence trail before the trail goes cold.