22. Zero-based review to Ongoing Authorization See guidance on initial zero-based review here, a monitor period here, and ongoing authorization here.