Signaling strategies for ISO 26000: a firm-level approach