Citibank's and UBS's disastrous behavior reflects bad corporate governance—both ranked low on value-creation and ethical-culture measures before the crisis—made possible because banks are regulated to be relatively immune to corporate governance: the Bank Holding Company Act bars hedge funds and private equity from taking large controlling stakes, and the 1940 Act limits institutional investors to 1-2% ownership, so concentrated owners who would discipline management are largely prevented.