In the wake of the 2008 financial crisis, regulators concluded that monitoring individual banks for individual risks had been insufficient. The crisis was not the sum of separate failures. It was the systemic consequence of an architecture whose vulnerabilities concentrated and cascaded at sites the existing supervisory framework was not built to see.