A business wants to implement three-factor authentication amongst its staff. Staff will need to provide their password and a code sent to their mobile phone when logging in, but will also require using a physical security key (Google's Titan Security Key) as the second factor to log in. The business will need to purchase a number of Titan Security Keys for its staff from Google. What is the business process that the business will carry out to obtain these keys for its staff, and what is the reason for your answer?