Backtesting, stress testing, and risk attribution - Marginal VaR, component VaR, and risk contributions