Which compliance category uses a different mechanism than the others to gather its compliance inform

Which compliance category uses a different mechanism than the others to gather its compliance
information?

A.
Patch policy

B.
Audit policy

C.
AppConfig policy

D.
Software policy