Those who don't report incidents within x days of the first report should forfeit their 10% bonus for some pay period y to a pool to be split among those who do report incidents in the time frame, with those who report earlier receiving larger portions than those who report later.
It thus is always in everyone's individual best interest to try to identify incidents and report them as quickly as possible.