Description: User access management is a critical process in information security that controls who can access specific systems and data within an organization. This process involves implementing policies and technologies that ensure only authorized users can access sensitive resources. Multi-factor authentication (MFA) is one of the most effective strategies in this area, as it requires users to provide multiple forms of verification before gaining access, adding an extra layer of security. Additionally, the Zero Trust security approach is based on the premise that no entity, whether internal or external, should be trusted by default. In this model, every access attempt is verified and validated, regardless of the user’s location. Therefore, user access management focuses not only on initial authentication but also on continuous monitoring and risk assessment, thus ensuring a secure environment that complies with current regulations.