CYBERSECURITY AND FINANCIAL STABILITY
                             
                                            
                                                    
                            
                Optimal cybersecurity investment depends on threat severity and bank fragility. Regulators should consider operational resilience standards, red-teaming, subsidies, and negligence penalties to facilitate socially desirable cybersecurity investment.