Risks not in VaR