In understanding the client's control activities at the entity level, consideration is given to factors such as

the extent to which performance of control activities relies on IT$.$

the extent to which controls included in the organization's policies are being applied.

whether adequate safeguards are in place to prevent unauthorized access to or destruction of documents, records and assets.

all of the answers are correct.