Cyber Risk and Security Investment Staff Working Paper 2022-32 Toni Ahnert, Michael Brolley, David Cimon, Ryan Riordan We develop a principal-agent model of cyber-attacking with fee-paying clients who delegate security decisions to financial platforms. We derive testable implications about clients’ vulnerability to cyber attacks and about the fees charged. Content Type(s): Staff research, Staff working papers Topic(s): Economic models, Financial services, Financial stability, Financial system regulation and policies, Payment clearing and settlement systems JEL Code(s): D, D7, D78, D8, D81, G, G1, G18, G2, G21, G23