Quant Memo
Core

Risk Limit Frameworks

A limit framework is the set of hard boundaries — on position size, VaR, leverage, concentration — that a firm sets before a trade ever happens, so that no single desk can blow up the whole book by the time anyone notices.

Prerequisites: Value at Risk (VaR), Risk Budgeting

A trader who is right most of the time can still sink a firm. The mechanism is almost never a bad forecast, it is a position that grew larger than anyone measured until the one day it went wrong. A limit framework exists to stop that specific failure: it fixes, in advance, how big any single bet is allowed to get, so the decision is made calmly on a normal Tuesday rather than in a panic on the day it matters.

What gets limited

A firm rarely sets just one number. It stacks several kinds of limits that catch different failure modes:

Limit typeWhat it capsCatches
Notional limitFace value of positionsSimple over-sizing
VaR limitEstimated loss at a confidence level over a horizonVolatility and correlation risk
Stop-loss limitRealized loss on a position or bookA thesis that turned out wrong
Concentration limitShare of book in one name, sector, or factorA single blow-up eating everything
Leverage limitGross or net exposure relative to capitalSilent leverage build-up
Liquidity-adjusted limitSize relative to how fast it can be exitedPositions too big to unwind quietly

No single limit is sufficient on its own. A notional limit says nothing about volatility; a VaR limit can understate risk in a correlation breakdown; a stop-loss only reacts after the loss has happened. The framework's value comes from the combination.

How limits cascade

Limits are set top-down and consumed bottom-up. The firm sets an overall risk appetite, splits it across desks, and each desk splits its share across traders and strategies. A trader who wants more risk than their allocation must ask the desk head, who must ask upward again if the desk itself is near its own ceiling.

Firm-wide risk appetite Desk A limit Desk B Desk C limit Trader 1 Trader 2
Each box's limit is smaller than the box above it, and the sum of a level's children is capped by its own limit — no desk can allocate more than it was given.

The arithmetic matters: a desk's limit is not the sum of unlimited trader limits. If Desk A is capped at a VaR of $2m, the traders under it must collectively fit inside $2m, which forces the desk head to actively decide who gets how much rather than letting everyone size up independently.

Worked example

A macro desk has a VaR limit of $1.5m at 99% over one day. Three traders currently show individual VaRs of $0.6m, $0.5m, and $0.5m. Summing them naively gives $1.6m, over the limit, but VaR is not additive across imperfectly correlated books. Using the desk's estimated correlation structure, the diversified desk-level VaR comes out to $1.1m, comfortably inside the $1.5m limit.

This is why a risk desk computes limits on the portfolio, not the sum of parts: two traders can each be within their individual budgets while the desk is fine, or a new trade that looks small in isolation can push the diversified total over the line if it happens to correlate badly with what the others already hold. See Marginal Contribution to Risk for how a risk manager decides whether a specific trade is the one to trim.

A limit framework's job is not to prevent losses, it is to bound the size of any single loss before anyone knows whether it will happen. Limits are set on ignorance, not on hindsight — by the time a position looks dangerous, the framework should already have stopped it from growing that far.

What breaks a framework

  • Stale limits. A VaR limit calibrated to last year's volatility regime can be far too loose once volatility jumps, letting a book that "passed" the limit take on much more real risk than intended.
  • Limit arbitrage. A trader who understands the limit metric can construct a position that scores low on the measured risk while carrying real risk the metric misses, for example a tail-heavy options structure that shows a small VaR but a large expected shortfall. This is why many desks pair a VaR limit with a stress-test or expected-shortfall overlay.
  • Slow escalation. If breaching a limit merely triggers a form rather than an automatic unwind, the limit becomes advisory. The framework only works if breaches have a fast, pre-agreed consequence.
  • Intraday blindness. End-of-day limit checks miss a position that breached and reverted within the day. See What To Watch On The Risk Screen All Day.

When reading a firm's risk report, check whether limits are set on gross exposure, net exposure, or a risk measure like VaR — the three can tell wildly different stories about the same book.

Related concepts

Practice in interviews

Further reading

  • Jorion, Value at Risk (Ch. 17, Risk Budgeting)
  • Crouhy, Galai & Mark, The Essentials of Risk Management (Ch. 3)
ShareTwitterLinkedIn