According to the International Professional Practices Framework, which of the following statements is true regarding a corporate social responsibility (CSR) program?

1. Every employee generally has a responsibility for ensuring the success of CSR objectives.

2. The board has overall responsibility for the effectiveness of internal control processes associated with CSR.

3. Public reporting on the CSR governance process is expected.

4. Organizations generally have flexibility regarding what is included in a CSR program.