According to NIST SP 800-37 Rev 2 appendix F, there exists several types of authorization decisions including all of the following except one. Response:

"Ongoing authorization" is not explicitly listed as a specific *type* of authorization decision in NIST SP 800-37 Rev. 2, Appendix F. Instead, it refers to the continuous process of monitoring and maintaining the authorization posture over the system lifecycle, rather than a distinct decision outcome itself.

Common control authorization is a recognized type of authorization decision for controls shared across multiple systems.

Authorization to use is a recognized type of authorization decision, granting permission for a specific system or service to operate.

Denial of Authorization is a possible outcome of an authorization decision process, explicitly rejecting permission to operate or use.