🏹 Happy Dussehra — victory of good over evil!

Value at Risk in Banking: VaR Methods and Limits 2026

CAIIB By Ashish Jain · IIBF STORE Editorial · 04 July 2026 · Updated 02 Oct 2026 · 7 min read · 105 views
Value at Risk in Banking: VaR Methods and Limits 2026

Every bank that holds a trading book needs a single number that answers a blunt question: how much could we lose on a bad day? Value at Risk in banking is that number. Value at Risk (VaR) estimates the maximum loss a portfolio is unlikely to exceed over a chosen holding period, at a chosen confidence level. For CAIIB Risk Management candidates, VaR sits at the heart of market-risk measurement, and examiners routinely test its three calculation methods, its two defining parameters, and — most importantly — where it quietly breaks down. This guide walks through the concept, the historical, variance-covariance and Monte Carlo approaches, the role of back-testing, and the limitations that pushed regulators toward Expected Shortfall.

What Value at Risk Actually Measures

VaR is a probabilistic statement about losses, not a worst-case ceiling. A statement such as "the one-day 99% VaR is Rs 5 crore" means that on 99 out of 100 trading days the portfolio should not lose more than Rs 5 crore; on roughly one day in a hundred, losses may — and eventually will — be larger. Two parameters define every VaR figure. The first is the confidence level, commonly 95% or 99%, which fixes how far into the loss tail you are looking. The second is the holding period, the horizon over which the loss could occur, typically one day for trading desks and ten days for regulatory capital under the Basel market-risk framework. Change either parameter and the number changes: a 99% VaR is always larger than a 95% VaR on the same book, and a ten-day VaR is larger than a one-day VaR. Because VaR compresses an entire loss distribution into one figure, it is prized by boards and risk committees as a common yardstick across desks, asset classes and currencies. That same compression, though, is the source of its most serious weaknesses, which is why the CAIIB syllabus never treats VaR as a stand-alone answer to market risk.

The Three Methods: Historical, Variance-Covariance, Monte Carlo

Banks compute VaR in three broadly accepted ways. The historical simulation method takes the portfolio as it stands today and revalues it against actual market moves observed over a look-back window — say the last 250 or 500 trading days — then reads the VaR straight off the ranked list of simulated profit-and-loss outcomes. It assumes the recent past is a fair guide to the near future and makes no assumption about the shape of the distribution, which is its main appeal. The variance-covariance (or parametric) method assumes returns are normally distributed and computes VaR from the portfolio's standard deviation and the correlations between positions, scaling by the z-score for the chosen confidence level (about 1.65 for 95% and 2.33 for 99%). It is fast and analytically clean but understates risk when real returns have fat tails. The Monte Carlo simulation method generates thousands of random market scenarios from an assumed statistical model, revalues the portfolio under each, and derives VaR from the resulting distribution. It handles non-linear instruments such as options far better than the other two, at the cost of heavy computation. A common exam trap is matching each method to its core assumption — memorise that variance-covariance assumes normality, historical assumes the past repeats, and Monte Carlo assumes a chosen model is correct.

Key Concepts — Risk Management (Elective)
Key Concepts — Risk Management (Elective)

Confidence Level, Holding Period and Back-Testing

The credibility of any VaR model rests on back-testing — comparing predicted VaR against actual daily profit and loss to count how often losses exceed the estimate. Under the Basel traffic-light approach, a supervisor allocates a bank's model to a green, amber or red zone based on the number of exceptions in a 250-day window. Too few exceptions suggest the model is overly conservative and wastes capital; too many suggest it understates risk and may trigger a regulatory multiplier that raises the capital charge. Scaling between horizons matters here too: a one-day VaR is often scaled to ten days by multiplying by the square root of ten, a shortcut that assumes returns are independent and identically distributed and that breaks down in trending or crisis markets. The Reserve Bank of India expects banks to validate market-risk models regularly and to document exceptions, so back-testing is both a statistical exercise and a governance requirement. For exam purposes, remember the direction of the levers: raising the confidence level or lengthening the holding period increases VaR, and a clean back-test with the expected exception rate — about 1% of days at 99% confidence — is the evidence a model is well calibrated.

Limitations and the Move to Expected Shortfall

VaR has three limitations the CAIIB syllabus expects you to name. First, it says nothing about the size of losses beyond the cut-off — a 99% VaR of Rs 5 crore is silent on whether the 1% tail loss is Rs 6 crore or Rs 60 crore. Second, VaR is not sub-additive: the VaR of a combined portfolio can exceed the sum of the parts, which perversely penalises diversification and violates the properties of a coherent risk measure. Third, VaR is only as good as its inputs — a short or benign look-back window will understate risk precisely when markets are about to turn, a flaw laid bare in the 2008 crisis. These failings drove the Basel Committee to adopt Expected Shortfall (ES), the average loss given that the VaR threshold is breached, as the primary market-risk metric under the Fundamental Review of the Trading Book. ES captures tail severity and is sub-additive, addressing VaR's two structural gaps. VaR remains widely used for its intuitive simplicity, but modern risk management treats it as one input among many, sitting alongside stress testing and scenario analysis rather than replacing them. Understanding why the industry moved on is exactly the kind of higher-order reasoning that separates strong CAIIB answers from rote ones.

Process & Framework — Risk Management (Elective)
Process & Framework — Risk Management (Elective)

Conclusion: Turn VaR Theory into Exam Marks

Value at Risk in banking is deceptively simple on the surface and rich underneath: one number, two parameters, three methods, and a well-known set of limitations that reshaped global regulation. Master the confidence-level and holding-period levers, be able to contrast historical, variance-covariance and Monte Carlo methods on their assumptions, and always be ready to explain why Expected Shortfall now leads the market-risk framework. To lock these ideas in, work them under exam conditions. Attempt topic-wise questions on our CAIIB mock tests, reinforce the terminology with the risk concept match game, and study the full syllabus through the structured CAIIB Risk Management elective course. You can also keep policy rates handy on the RBI rates tracker and read more explainers on the iibf.store blog. Consistent practice on these tools is what converts VaR theory into confident marks on exam day.

What does Value at Risk mean in banking?

Value at Risk is the maximum loss a portfolio is unlikely to exceed over a set holding period at a chosen confidence level. A one-day 99% VaR of Rs 5 crore means losses should stay below that figure on 99 of every 100 trading days.

What are the three methods of calculating VaR?

The three methods are historical simulation, which reprices the portfolio against past market moves; variance-covariance, which assumes normal returns and uses volatility and correlations; and Monte Carlo simulation, which generates many random scenarios and is best for non-linear instruments like options.

How is a VaR model back-tested?

Back-testing compares each day's predicted VaR against actual profit and loss and counts exceptions where losses exceed the estimate. The Basel traffic-light approach places the model in a green, amber or red zone over a 250-day window, and too many exceptions raise the capital multiplier.

Why is Expected Shortfall replacing VaR?

VaR ignores how large losses become beyond its threshold and is not sub-additive, so it can penalise diversification. Expected Shortfall measures the average loss beyond the VaR cut-off, captures tail severity, and is sub-additive, which is why Basel adopted it as the primary market-risk metric.

In Practice — Risk Management (Elective)
In Practice — Risk Management (Elective)
Next step

Practice this topic

Ready to put this into practice?

Take a free mock test, download chapter PDFs, or watch a video class — all included on iibf.store.

Keep reading