Tool support for a risk management process - an empirical study on effectiveness and efficiency