IT systems which operate in a dynamic environment must adapt to permanently changing business requirements. In particular new compliance rules like Sarbanes-Oxley-Act or BASEL II demand complete transparency of business processes and IT-support, also after changes. IT-departments and software providers need to clearly define and continuously assure the quality of the IT system during development and operation.