Owners may enforce two-step verification via the Security Policies page for the whole organization. Members are automatically alerted and are prompted to set up two-step verification.