Cyber Instability

When terrorists attacked the World Trade Center on September 11, 2001, they also attacked the U.S. financial system. In addition to destroying critical financial infrastructure, the collapse of the twin towers closed the New York Stock Exchange and disrupted the payments system that links U.S. intermediaries, threatening to shut down banks, ATM machines and credit card operations across the country. Only extraordinary intervention by the Federal Reserve kept the system afloat (see, for example, Rosengren).

We have long argued that financial stability is a vital common resource (see here). As ECB Board member Cœuré suggests in the opening quote, the same applies to financial cybersecurity—the protection of financial information and communications technologies (ICT) and their associated networks from failures and attacks. The events of 9/11 and their aftermath dramatically highlighted the link between stability and cybersecurity. Moreover, because our financial system is so deeply reliant on ICT and on large, global networks, these two objectives are more closely linked than ever before: ensuring one means guarding the other.

In this post, we highlight the pervasiveness of cyberthreats as a source of operational risk in finance. Consistent with the Presidential Policy Directive 21 and a recent Presidential Executive Order aimed at strengthening cybersecurity, the U.S. government has designated financial services infrastructure as critical to national and economic security (see here). Nevertheless, numerous challenges—ranging from the availability of reliable data to the ever-changing nature of the attacks themselves—make the goal of safeguarding financial ICT networks very difficult. To be effective, cybersecurity efforts require mechanisms for preventing successful attacks, limiting their impact, and promoting quick, reliable recovery. Reducing vulnerability and contagion while boosting cyberresilience is a very tall order….

Looking Back: The Financial Crisis Began 10 Years Ago This Week

In his memorable review of 21 books about the 2007-09 financial crisis, Andrew Lo evoked Kurosawa’s classic film, Rashomon, to characterize the remarkable differences between these crisis accounts. Not only were the interpretations in dispute, but the facts were as well: “Even its starting date is unclear. Should we mark its beginning at the crest of the U.S. housing bubble in mid-2006, or with the liquidity crunch in the shadow banking system in late 2007, or with the bankruptcy filing of Lehman Brothers and the ‘breaking of the buck’ by the Reserve Primary Fund in September 2008?”

In our view, the crisis began in earnest 10 years ago this week. On August 9, 2007, BNP Paribas announced that, because their fund managers could not value the assets in three mutual funds, they were suspending redemptions. With a decade’s worth of hindsight, we view this as a propitious moment to review both the precursors and the start of the worst financial crisis since the Great Depression of the 1930s.

But, first things first: What is a financial crisis? In our view, the term refers to a sudden, unanticipated shift from a reasonably healthy equilibrium—characterized by highly liquid financial markets, low risk premia, easily available credit, and low asset price volatility—to a very unhealthy one with precisely the opposite features. We use the term “equilibrium” to reflect a persistent state of financial conditions and note that—as was the case for Humpty Dumpty—it is easy to shift from a good financial state to a bad one, but very difficult to shift back again....

The Treasury's Missed Opportunity

Last week, the U.S. Treasury published the first of four reports designed to implement the seven core principles for regulating the U.S. financial system announced in President Trump’s Executive Order 13772 (February 3, 2017).

Seven years after the passage of Dodd-Frank, it’s entirely appropriate to take stock of the changes it wrought, whether they have been effective, and whether in certain cases they went too far or in others not far enough. President Trump’s stated principles provide an attractive basis for making the financial system both more cost-effective and safer. And much of the Treasury report focuses on welcome proposals to reduce the unwarranted compliance burden imposed by a range of regulations and supervisory actions on small and medium-sized depositories that—if adequately capitalized—pose no threat to the financial system. We hope these will be viewed universally as “motherhood and apple pie.”

Unfortunately, at least when considering the largest banks, our conclusion is that adopting the Treasury’s recommendations would sacrifice resilience to achieve cost reductions, yet with little prospect for boosting economic growth. Put simply, implementation of the Treasury plan would reduce regulation of the most systemic intermediaries, and in so doing, unacceptably reduce the resilience of the U.S. financial system....

Commentary

Money, Banking, and Financial Markets