This. Technical verification solutions help, but none of them defend very well against your CEO apparently ordering you to bypass the verification step.
There's no reason this sort of authorization process couldn't be trivially handled with any one of a number of simple technologies. If there isn't already some sort of Personal Verification Service to do this, well, there's a niche to be had. Come up with a better name.