The Basel Accords oblige banks to use two methods to measure and limit risk – value at risk and expected shortfall – but research shows these are insufficient to curtail the behaviour of rogue traders. Damiano Brigo and John Armstrong suggest a different approach.