Full AWS Practitioner Certification Question

Which of the following statements is TRUE regarding system categorization and external compliance?