When obtaining our understanding of the control environment, we shall treat the assessed fraud risks as significant risks and accordingly, to the extent not already done so, we shall obtain an understanding of the entity's related controls, including control activities, relevant to such risks.