Lawsuits against a business for providing inadequate security must be based on specific types of evidence.