| Title | Too Big to Fail |
| Author | Bryan Burrough & John Helyar |
| Ultra-brief Summary | Inside story of the 2008 financial crisis, highlighting systemic risk, government bailouts, and how corporate leaders and regulators managed (and sometimes mishandled) massive financial institutions. |
| Year | 2009 |
| Pages (Approx.) | 600 |
| Fiction/Non-Fiction | Non-Fiction |
| Genre/Focus | Financial Crisis/Economic History |
| Rating | (7/10) A thorough, real-time account of the 2008 financial crisis negotiations—indispensable for understanding systemic risk, though less of a step-by-step IA how-to. Highly relevant case study on the importance of risk oversight and regulatory engagement. |
When the global financial crisis erupted in 2008, the reverberations were felt in every corner of the world, bringing banking behemoths to their knees and threatening to sink entire economies. In Too Big to Fail, journalist Andrew Ross Sorkin provides a behind-the-scenes chronicle of the frantic, high-stakes negotiations that unfolded among Wall Street CEOs, Federal Reserve officials, and U.S. Treasury leaders. The result is a detailed, moment-by-moment account of how close we came to a complete financial meltdown—and the extraordinary (and controversial) interventions used to avert it.
For internal audit (IA) professionals, the meltdown is more than a historical crisis—it’s an epic case study in risk aggregation, corporate governance, regulatory oversight, and moral hazard. Sorkin’s narrative reveals how major financial institutions, spurred by profit-driven trading and weak risk controls, accumulated dangerously large exposures to subprime mortgages and complex derivatives. Meanwhile, government bodies struggled to monitor interconnected global markets. Too Big to Fail thus raises pressing questions about systemic risk: how do we oversee entities so massive that their failure threatens the entire economic system?
In this lengthy summary, we’ll trace Sorkin’s core themes, the chaotic negotiations to rescue or merge failing institutions, and the lessons for IA—particularly the importance of robust risk controls, scenario planning, and unbiased oversight. While this discussion aims for depth, it can’t capture every player or dramatic twist, so readers interested in the granular details of “backroom deals” and personal rivalries will still find new discoveries in Sorkin’s full text.
Core Themes and Arguments
A. Systemic Risk: Contagion and Moral Hazard
- Systemic Risk: Many large financial firms had become so interconnected—through derivatives, repo lending, and overnight funding—that the failure of one could trigger a domino effect.
- Too Big to Fail: The concept that certain institutions (e.g., AIG, Citigroup) are so integral to the economy that their collapse would cause unacceptable harm, compelling government intervention.
- Moral Hazard: By bailing out these giant entities, the government arguably incentivizes risky behavior (since companies expect rescue if things go awry).
Sorkin shows how the panic among policymakers in 2008 stemmed from the fear that allowing one major bank to fail might set off an unstoppable chain reaction—akin to Lehman Brothers’ sudden bankruptcy, which inflicted havoc on credit markets worldwide.
B. The Collapse of Giants: Bear Stearns, Lehman, and AIG
- Bear Stearns (March 2008)
- An early victim of the subprime crisis, Bear nearly collapsed after customers and counterparties lost confidence.
- The Federal Reserve facilitated Bear’s shotgun sale to JPMorgan Chase. This established a precedent for government-assisted bailouts but also fueled moral hazard debates.
- Lehman Brothers (September 2008)
- Led by CEO Dick Fuld, Lehman took outsized bets on mortgage-backed securities, culminating in massive losses.
- Despite frantic weekend negotiations, no private buyer (Barclays, Bank of America) or government rescue emerged. Lehman’s abrupt bankruptcy shocked global markets, intensifying the crisis.
- AIG (September 2008)
- The insurance giant wrote enormous quantities of credit default swaps (CDS) on mortgage securities without robust capital reserves.
- Fearing systemic meltdown, the Fed provided an unprecedented $85+ billion loan to AIG in exchange for majority equity ownership—effectively nationalizing it temporarily.
C. Treasury and Federal Reserve Leadership
- Henry “Hank” Paulson (Treasury Secretary, ex-Goldman Sachs CEO): Struggled to balance ideological aversion to bailouts with the harsh realities of an unfolding economic catastrophe.
- Ben Bernanke (Federal Reserve Chairman): As a scholar of the Great Depression, Bernanke was acutely aware of how bank runs and frozen credit could devastate economies.
- Timothy Geithner (President of the Federal Reserve Bank of New York): Deeply involved in dealmaking, orchestrating attempts to merge failing banks or inject liquidity.
Sorkin illustrates how these officials, along with other international regulators, scrambled for solutions—rescuing some firms (AIG), letting others fail (Lehman), and forcibly merging others (Wachovia, Merrill Lynch).
D. Executive Behavior and Conflicts
- Wall Street CEOs: From Jamie Dimon (JPMorgan) to John Thain (Merrill Lynch) to Lloyd Blankfein (Goldman Sachs), top executives jockeyed for position, seeking to protect their own institutions (and personal stakes) even as the broader system teetered.
- Excesses of the Boom: Lavish compensation, reliance on risky trading, and financial engineering overshadowed the stability once prized by commercial banks. “Short-term profits” often trumped risk-limiting measures.
Sorkin doesn’t claim these leaders were all purely cynical—some believed in free-market principles—but faced a real-time meltdown that forced them into contradictory positions (arguing for bailouts while also decrying government interference).
E. Aftermath and Legislation
The crisis set the stage for major policy changes:
- TARP (Troubled Asset Relief Program): A $700 billion fund allocated by Congress to buy distressed assets or inject capital into struggling institutions.
- Stress Tests and Dodd-Frank: New regulations aimed at increasing capital requirements, restricting proprietary trading (the Volcker Rule), and establishing procedures for orderly wind-downs of failing banks.
- Ongoing Debate: Whether these reforms truly ended “too big to fail” remains contested. Some argue big banks are even bigger post-2008, with consolidated market share.
Relevance to Internal Audit and Organizational Oversight
A. Enterprise Risk Management (ERM)
The meltdown revealed severe weaknesses in risk management:
- Siloed Risk Departments: Many banks had compliance or risk teams, but they lacked real authority to rein in star traders or top dealmakers.
- Underestimation of Correlated Risks: Firms hedged single positions but not systemic exposure. When housing markets plummeted, nearly all mortgage-linked products sank together.
- Misaligned Incentives: Compensation structures rewarded short-term gains. Internal auditors must consider how bonus plans can drive reckless behavior.
B. Scenario Planning and Stress Testing
Auditors can glean from 2008 that “worst-case” scenarios are not always improbable:
- Model Validation: Many financial institutions used complex “value at risk” (VaR) models that failed to capture tail risks. IA should question the assumptions behind models, especially for large-scale exposures.
- Contingency Plans: The haphazard scramble to rescue Lehman or AIG suggests a lack of robust “what if” planning. IA can ensure crisis simulations are part of enterprise risk frameworks.
C. Regulatory and Internal Oversight
- Board Engagement: Did boards fully grasp the scale of their banks’ mortgage bets? IA can facilitate board-level discussions on risk concentrations and embedded leverage.
- Inter-Entity Counterparty Exposures: Large institutions had complex derivatives exposures with each other, creating a domino effect. IA might push for aggregated risk views across business silos to highlight correlated vulnerabilities.
D. Cultural Factors
Sorkin’s narrative also underscores the influence of culture:
- ‘Bigger is Better’ Mindset: Mergers and expansions drove banks to seek “economies of scale,” ignoring how unwieldy massive, global operations could become.
- Heroic CEO Archetype: Charismatic leaders took aggressive gambles. IA must champion the principle that no single individual—regardless of star status—is above rigorous checks and balances.
About the Author (John Carreyrou)
A. Professional Background
- Financial Journalist: A columnist and editor at The New York Times, covering Wall Street, mergers & acquisitions, and high finance.
- Founder of DealBook: A Times newsletter that provides daily insights into dealmaking and financial trends.
B. Approach to Research
Sorkin conducted numerous firsthand interviews with bankers, lawyers, and policymakers, reconstructing crucial phone calls and closed-door meetings. His goal was to create a narrative timeline revealing the personalities and pivotal decisions that shaped the crisis response.
C. Critiques and Influence
Influence: Too Big to Fail became a bestseller, adapted into an HBO film, and remains a go-to resource for understanding the meltdown’s key players.
Critics: Some argue Sorkin’s approach can be too sympathetic to Wall Street insiders, occasionally lacking deeper moral judgments about their culpability.
Historical and Corporate Context
A. The 2000s Housing Boom
Loose lending standards, low interest rates, and securitization of mortgages fueled a housing bubble. Banks packaged subprime mortgages into mortgage-backed securities (MBS) and collateralized debt obligations (CDOs), garnering AAA ratings from agencies that used flawed models.
B. Shadow Banking System
Investment banks and non-bank institutions relied on short-term funding (like repo agreements) to hold long-term, illiquid mortgage instruments. This mismatch of durations made them vulnerable to “runs” when counterparties demanded more collateral or refused to roll over financing.
C. Global Repercussions
As Sorkin shows, once Lehman failed, panic spread worldwide: London-based money market funds faced runs, European banks like Fortis needed rescue, and global interbank lending froze. The interconnectedness of finance turned a U.S. subprime issue into an international crisis.
Applying Lessons to Internal Audit and Compliance
A. Holistic Risk Aggregation
IA must push organizations to measure exposures across the enterprise:
- Cross-Silo Collaboration: Risk from one desk (e.g., trading mortgages) can multiply if another desk also invests in related instruments.
- Consolidated Reporting: Weekly or monthly risk dashboards should aggregate leveraged positions, off-balance-sheet vehicles, and potential counterparty defaults.
B. Board-Level Risk Appetite Statements
- Clear Thresholds: If the board had a well-defined appetite (e.g., limiting subprime exposure to X% of capital), it might have curtailed risky expansions.
- Ongoing Monitoring: IA can check that actual practices align with these statements, flagging deviations early.
C. Regulatory Engagement
The 2008 crisis showed that even regulators lacked full visibility of large banks’ exposures. IA teams can:
- Facilitate Regulator Interactions: Provide transparent data on exposures, stress tests, and internal risk controls.
- Stay Current on New Rules: Dodd-Frank, Basel III capital requirements, and resolution planning standards require continuous compliance audits.
D. Ethical Climate and Culture
The crisis laid bare how perverse incentives can lead employees to overlook or rationalize ballooning risks:
- Whistleblower Channels: IA can strengthen channels for employees to report unscrupulous trades, data manipulation, or risk concealment.
- Compensation Audits: Ensure pay structures do not disproportionately reward short-term gains. If a product yields multi-year risk, bonuses should reflect that timeline.
E. Scenario Testing for Liquidity and Solvency
Counterparty Failure Exercises: Hypothesize that major partners default. If the result is dire, risk concentration might be too high.
Liquidity Stress Audits: Assess if the company can endure a run on short-term funding.
Notable Critiques and Counterpoints
- Too Sympathetic?
Some reviewers feel Sorkin’s narrative, heavily built on insider perspectives, lends an overly sympathetic or apologist tone toward bankers. Critics wanted deeper condemnation of the systematic misdeeds. - Limited Focus on Broader Societal Impact
While it details government negotiations, the book spends less time on how the crisis affected ordinary households (foreclosures, job losses). - Complexity vs. Accessibility
For newcomers, the labyrinth of acronyms (CDS, MBS, CDO) and institution names can be daunting. Sorkin attempts to keep the story brisk, but the complexity of modern finance can still overwhelm.
For IA professionals, these critiques don’t diminish the core lessons about structural risk or the meltdown’s blow-by-blow details. Instead, they highlight the need to consult additional resources that address root causes in credit markets and the real economy.
Key Takeaways for IA Professionals
- Question Big Assumptions: If a firm’s strategy hinges on continual borrowing at cheap rates or presumes “housing prices always go up,” IA must probe these assumptions vigorously.
- Look for Interconnected Exposures: The crisis shows how the downfall of one large counterparty can ruin many. IA should ensure robust reporting of net exposures, clearing house margins, and collateral call triggers.
- Board and Exec Accountability: Effective risk governance mandates that the board and C-suite truly grasp complex product structures. IA can facilitate education sessions or risk “deep dives.”
- Audit Culture, Not Just Numbers: The meltdown had a cultural dimension—rewarding short-term deals at the expense of prudence. IA can track not just metrics but also intangible signals like aggression in sales or disregard for compliance red flags.
- Emergency Procedures: If a firm faces a sudden liquidity crunch, how quickly can it mobilize bridging loans or sell assets? IA can ensure those processes are tested in “war games” well before any real crisis.
- Proactive Regulator Relations: Being transparent and cooperative with regulators fosters trust—an asset if the firm ever needs official assistance in dire times.
- Long-Term Impact: The meltdown was not just a short drama but a generational shift. IA must remain agile as rules (like Dodd-Frank) evolve, ensuring ongoing compliance and alignment with best practices.
Too Big to Fail offers a gripping inside view of the hectic days and nights when the financial world teetered on collapse. Andrew Ross Sorkin’s reportage reveals the frantic calls, personal rivalries, and moral quandaries that shaped decisions worth hundreds of billions of dollars. From an internal audit standpoint, the 2008 crisis remains a profound lesson in risk oversight, corporate culture, and the entwined nature of modern finance.
The meltdown’s key takeaways—around systemic risk, moral hazard, and inadequate governance—apply far beyond banks to any large institution. As companies grow more interconnected, so does their vulnerability to unforeseen shocks. By championing robust risk management, transparent culture, and scenario planning, IA professionals can help prevent their organizations from becoming the next cautionary tale.
In Sorkin’s final portrait, the crisis was averted—barely. The cost: unprecedented bailouts, political backlash, and lingering distrust. For internal auditors, the message is that vigilance and independent oversight are not bureaucratic burdens but essential guardrails in a financial system where risk can accumulate silently until it’s too late. Understanding Too Big to Fail is thus invaluable for any auditor navigating high-stakes environments, reaffirming that no entity should be deemed immune from collapse—or from the critical eye of diligent internal oversight.

Leave a Reply