Your Chief Security Officer has requested information on why two-factor authentication is needed for newly implemented single sign-on technology. As a security analyst, it is your responsibility to provide the CSO with a brief business case statement and timeline estimate to implement this solution.