Risk assessments which are part of the risk management process implies a systematic identification of risks and judgments of risk levels and are often used to create a foundation for decisions how to handle risks. Risk matrices are widely used as a tool within risk assessments. A number of articles have lately pointed out some weaknesses with the risk matrix, but also how it could be improved and how the weaknesses could be avoided. This paper describes how accepted theories have been applied in practical action in order to overcome the limitations of the risk matrix and improve the way of working with risk analyses within the studied organization. Despite the limitations the study finds the risk matrix to be a useful tool, but it should not be used in isolation and complementary techniques and tools are required.