Regulators might think it’s important to place reliance on VaR, but that doesn’t necessarily mean you should. There are more effective ways to safeguard your firm.