Towards sustainable business cultures: the role of law and norms