How companies can move from playing ESG defense to ESG offense