We show that installing stronger risk management into financial institutions – a proposal widely discussed following the 2008 financial crisis – is insufficient to constrain institutions' exposure to investment with lurking risk, such as asset-backed securities. Financial regulations affect...