The correct answer is Resource Owner.

The Resource Owner is the role that is accountable for the data and systems assigned to them and for maintaining the inventory of those information systems. They ensure each system is classified according to its impact level under the organisation's classification and risk management policies and they coordinate classification activities with system owners and security teams.

The Resource Owner is responsible for ensuring the catalog of systems is current because they own the business context and value of the information and they must ensure systems are labeled and handled according to their impact on confidentiality, integrity, and availability.

The Security Lead is incorrect because that role usually focuses on implementing and managing security controls and operations rather than owning the business accountability for inventory and formal classification.

The Head of Information Technology is incorrect because that role typically oversees IT strategy and operations and may delegate inventory and classification duties but does not usually hold the specific ownership and accountability for classifying each system.

The Approval Authority is incorrect because that role, often called the authorizing official, is responsible for accepting residual risk and authorizing system operation rather than maintaining the system catalog or performing the initial classification.

Full AWS Practitioner Certification Question