A financial services company is redesigning its security strategy around the Zero Trust model. The security architect wants to focus on one Zero Trust pillar that ensures every user account is strongly verified with multi-factor authentication and evaluated for risk before being granted access to any resource. Which Zero Trust pillar addresses this requirement?