Why do I need to receive two emails?

The Auditor General of South Africa requires us to use dual authentication on systems that contain personal data, so we send the reset link and the key for that reset in two different e-mails.