A method for production refactoring of a company comprises quantifying risks stemming from regulations, in particular from an introduction of new regulation. It further comprises identifying actions to take in order to reduce an exposure to risk, quantifying costs of said actions and determining a revenue at risk depending on a revenue and a probability of failure representing said risks. Furthermore, it comprises determining a sequence of actions for solving an improvement problem depending on said revenue at risk and said costs of said actions and profits reducing said revenue at risks and said costs of said actions and increasing said profits.