Quant Memo

Paper Explained

Optimizing for the Tail: How Rockafellar and Uryasev Made CVaR Practical

Everyone agreed average-loss-in-the-tail was a better risk measure than VaR. Nobody could optimize it. Rockafellar and Uryasev found the trick that turned it into a simple linear program.

QM
Quant Memo

July 13, 2026

The paper

Optimization of Conditional Value-at-Risk

R. Tyrrell Rockafellar and Stanislav Uryasev · 2000

By the late 1990s the risk management world had a diagnosis and no cure. The diagnosis: Value-at-Risk is a flawed risk measure. The cure that everyone pointed at: use the average loss in the bad tail instead, a quantity now usually called Conditional Value-at-Risk (CVaR) or expected shortfall. The obstacle: nobody knew how to actually build a portfolio that minimizes it.

In 2000, Tyrrell Rockafellar and Stanislav Uryasev published the trick that removed the obstacle. It is one of those papers where the contribution is not a new concept but a piece of mathematical engineering so clean that it turns an intractable problem into something a laptop can solve in seconds.

The problem: VaR tells you where the cliff is, not how far the fall is

Value-at-Risk answers a threshold question. A one-day 99 percent VaR of 10 million dollars means: on 99 days out of 100, you should lose less than 10 million. It has two well-known defects.

Defect one: it is silent about the tail. VaR tells you the loss you will exceed 1 percent of the time. It says nothing at all about how bad things get when you do exceed it. A portfolio that loses 10 million in its worst 1 percent of days and a portfolio that loses 900 million in its worst 1 percent of days can have the same VaR. Those are not the same portfolio.

Defect two: it punishes diversification. VaR is not subadditive, meaning the VaR of two combined portfolios can be higher than the sum of their individual VaRs. Artzner and coauthors made this rigorous in their coherent risk measures paper. A risk measure that can penalize you for diversifying is telling you lies about risk.

CVaR fixes both. CVaR asks a different question: given that we are in the worst 1 percent of outcomes, what is our average loss? It looks past the cliff edge and measures the fall. And it is coherent, so it never punishes diversification.

So why did people keep using VaR? Because CVaR looked like a nightmare to optimize.

The key idea via analogy: stop chasing the cliff edge

Here is the shape of the difficulty. To compute CVaR, you first need to know where the tail starts, which means you first need to know the VaR. But if you are optimizing over portfolios, then every time you change the portfolio weights, the VaR moves. So the boundary of the region you are averaging over is itself a moving function of the thing you are optimizing. That kind of problem, where the answer depends on a threshold that depends on the answer, is exactly the kind that makes optimization go badly. In the general case the objective is not smooth, it can have many local minima, and standard solvers get stuck.

Rockafellar and Uryasev's insight was to stop trying to find the threshold first. They constructed an auxiliary function with two arguments: your portfolio weights, and a free variable that plays the role of a candidate threshold. This function has two beautiful properties:

  1. If you minimize it over the threshold variable, you recover CVaR exactly. So minimizing the auxiliary function over both the portfolio and the threshold simultaneously gives you the CVaR-minimizing portfolio.
  2. It is convex. Convex means bowl-shaped: there is one bottom, and any downhill path leads to it. Convex problems are the ones optimization theory can actually guarantee solutions for.

The analogy: imagine you are trying to find the lowest point in a valley, but the valley's boundary keeps moving as you walk. Rockafellar and Uryasev's move is to add an extra dimension to the map, in which the whole thing becomes a single, well-behaved bowl. Walk downhill in the bigger space, and when you land at the bottom you get the optimal portfolio and the correct threshold for free. You never had to chase the cliff edge, because the cliff edge came out as a by-product.

The practical payoff is even better. If you represent the future with a set of scenarios (either historical days or Monte Carlo simulations), the whole thing collapses into a linear program, the most thoroughly solved class of optimization problems in existence. Off-the-shelf solvers handle it, and they handle it at scale.

Why it mattered

  • It made the better risk measure the practical one. Before this paper, choosing CVaR over VaR meant giving up the ability to optimize. After it, CVaR was arguably easier to optimize than VaR, since VaR optimization is the genuinely nasty non-convex problem. The theoretical argument and the practical argument now pointed the same way.
  • It works with any distribution. The method makes no assumption that returns are normally distributed. You hand it scenarios. Fat tails, skew, jumps, option payoffs, credit losses: if you can simulate it, you can optimize CVaR over it. That was a huge advance over the normal-distribution VaR machinery that dominated the 1990s.
  • It gave you VaR for free. The optimal value of the auxiliary threshold variable is the VaR at the optimum. You get both numbers from one solve.
  • It moved beyond finance. The same formulation is now used in energy planning, supply chain design, insurance, and increasingly in machine learning, wherever someone wants to optimize against bad-case outcomes rather than average outcomes.
  • It supported the regulatory shift. The eventual move by bank regulators toward expected shortfall as the standard market risk measure rested on the fact that expected shortfall was both theoretically sounder and, thanks to work like this, computationally practical.

The honest limitations

  • Scenarios in, scenarios out. The optimization is exactly as good as the scenario set you feed it. If your historical window or your simulation model has never seen a genuine crisis, your CVaR-optimal portfolio is optimized against a tail that does not exist. This is not a flaw in the method, but it is where the real risk of misuse lives.
  • Tail estimates are the least reliable estimates you have. By definition, the 1 percent tail contains 1 percent of your data. Estimating the average of a small number of extreme observations is statistically fragile, and CVaR is more data-hungry in the tail than VaR is.
  • Coherence is not a guarantee of good behavior. CVaR is a better-behaved measure, not a magic one. It still assumes the future resembles your scenario distribution, and it can be gamed by anyone determined to game it.
  • Backtesting CVaR is awkward. VaR has a clean pass-fail test: count the days you exceeded it. Checking whether your CVaR forecasts were right is genuinely harder, which is a practical complaint regulators and risk managers still raise.

The one-line takeaway

Rockafellar and Uryasev found a reformulation that turns the average-loss-in-the-tail into a convex, and often simply linear, optimization problem, which is why a risk measure everyone agreed was theoretically superior finally became the one people could actually build portfolios with.

Related concepts

Related strategies