A company's IT department needs to enhance the security of its corporate email accounts. They decide to implement a process that requires users to authenticate through their password and an additional method, such as a code sent to their phone. What security measure should the IT department implement?
Antivirus software
Encryption
Firewall
Two-factor authentication