When criminal investigations become a business risk: What owners should know