Two-factor authentication is a second method of confirming that a user of a system is who they claim to be. It is usually used alongside a password and could involve a fingerprint scanner, a text message with a unique code or a token that generates unique codes. Most Mac, Linux and Windows systems do not have two-factor authentication available by default.
Cyber Essentials Plus does not require you to pay for additional hardware or software to enable two factor authentication. So, in most cases, two-factor authentication for administrator accounts will not be available on your system. Some laptops have built-in fingerprint scanners or other bio metric devices that can be enabled to allow two-factor authentication. If these are available on your devices, they must be enabled for administrator accounts.