“There are challenges in terms of the measurement of VAR for what are known as nonlinear derivatives, where things like gamma and vega are important dimensions of the risk.”