Introduction

The Audit Period in C1Risk refers to the timeframe that you wish to collect and view evidence for an internal or external audit. 

The Audit Period DOES NOT typically refer to your external audit evaluations period, rather, it refers to the preparatory evidence collection period, This typically begins prior to, but may overlap with your audit evaluation period.

EXAMPLE: SOC 2 or ISO 27001 have annual evidence collection and review requirements, so the audit period can be set for an annual period. (January 01 - December 31)

C1Risk enables you to establish the Audit Period in the GRC Library > Obligation that you wish to track and manage either for external audit or ongoing compliance.  

Setting your Audit Period will enable your obligation dashboard (go to the Summary Section of your Obligation) to track only activity that is in scope for the selected period.

How to Set your Audit Period

1. Go to the Obligation in question and open the details tab.

1. Click edit and modify the audit period as needed.
2. Click Save

1. Now the dashboard will reflect data from your chosen audit period.