Is standard deviation the correct way to measure risk?
Not necessarily. Standard deviation measures volatility (or predictability) of returns. Standard deviation punishes a subaccount equally for upward volatility (by giving it a high standard deviation figure that is then translated by most financial writers as high risk) as well as downward volatility; no one minds upward volatility.