The continuous date range during which a SOC 2 Type II or ISO 27001 surveillance audit tests operating effectiveness.
The audit period (or observation window) is the continuous date range covered by an attestation or certification. SOC 2 Type II observation windows are typically 3, 6, or 12 months; ISO 27001 certification cycles are 3 years with annual surveillance audits.
Run a free ComplianceIQ audit against SOC 2 and we'll surface every gap on this — and the other controls auditors flag — with the exact clause references to fix.