This paper does not do a lot of product evaluation on this kind of software. Based on the evaluation section on the enterprise architecture book, there are enterprise architecture evaluation tool that take risk assessment into account. However the criteria of risk assessment we talk about is far deeper than what are described in the white paper.