Knowledge Hub - QESTIT

QESTIT and CALPANA business consulting partner to deliver risk-based quality assurance and ensure compliance

Written by Andreas Demarcsek | Dec 4, 2025 4:52:07 PM

Goerlitz/Linz, December 04th 2025 – QESTIT,  Europe's leading specialist in quality assurance and software testing, and CALPANA business consulting, provider of the integrated governance, risk, and compliance platform CRISAM®, have entered into a strategic partnership. Their aim is to connect risk management, control, and testing across the full software lifecycle to achieve measurable improvements in quality, security, and compliance.

 

By combining the QESTIT methodology and the CRISAM® method and platform, companies can prioritize risks, quantify their impact, manage mitigation measures, and deliver audit-compliant evidence of effectiveness using tests, controls, and metrics. Across the full SDLC, this leads to faster, risk-driven releases, full end-to-end traceability, and a substantial reduction in audit workload.

 

Risk-based quality assurance stands or falls with solid evidence. With CRISAM®, we make effectiveness measurable and deliver the proof points business, IT, and audit teams need,” says Martin Bischoff, Head of Cybersecurity at QESTIT. Markus Müller, Managing Director at CALPANA business consulting, adds: “Our platform sets the orchestration framework, QESTIT brings leading QA expertise. This combination enables shorter development cycles, reduced compliance overhead, and robust KPIs to support strategic decisions.

 

The project establishes a new benchmark for automated test case execution and evaluation in QA. Leveraging multimodal AI, it automates the execution of test cases and systematically analyses results, enabling faster, more accurate defect detection and delivering more reliable, meaningful test outcomes.

 

The joint offering spans assessments, implementation, integration with existing toolchains (e.g., Jira, Azure DevOps, CI/CD pipelines, ITSM), managed services, and training programs. It supports compliance with standards like ISO 27001, NIS2, DORA, and sector-specific frameworks, with a clear focus on regulated industries such as finance, manufacturing, energy, and the public sector.

 

The press release is available for download in English and German.