According to the article by Porter and Kramer, why may corporate social responsibility $($CSR$)$ programs be difficult to maintain over the long runfor business?

CSR programs require very large CSR departments in order to run programs.

CSR programs focus mostly on reputation and have only a limited connection to the business

CSR programs can expose business to high levels of financial risk

CSR programs are well$-$known to be extremely costly