Firms are adopting responsible business practices that go beyond regulatory compliance