It is well-known that Information Security Risk Management (ISRM) activities can be challenging to perform and that tool support could provide support in different ways, for example, by automating tasks, guiding the user, or helping with documentation. Despite the need for tools, there is a lack of studies investigating ISRM tool usage. This paper contributes by presenting the results from one of the first studies targeting information classification and ISRM tool usage in practice. The study is based on a survey sent to government agencies in Sweden and was answered by 139 respondents (67%). The survey targeted the type of tools used and the perceptions of those tools. Findings include a list of tools perceived to contribute to performing ISRM activities, such as information classification, the reasons why the tools were selected, and how well they fulfil their needs. More specifically, we found that spreadsheets and document templates are the most common tools used – despite not being perceived as fulfilling the needs. We also found that taking on an even more holistic view might be needed when considering functionality in ISRM tools.