When running a Risk Report in the Symantec Endpoint Protection Manager (SEPM) using specific dates, the Earliest Event Time displayed in the report will be one hour earlier than configured in the report settings.
We're currently investigating this issue and will update this document once more information is available.