How do you calculate value at risk? Two ways of calculating VaR