In order to provide software of requested quality on time and in budget, it is essential to apply quality assurance (QA) activities such as reviews and tests. However, planning such activities and controlling their execution are challenging tasks for most companies. Thus, this thesis introduces and evaluates a novel approach, which combines commonly available data and expert knowledge to support the planning and controlling of QA activities.