Effective Bank Regulation: Lessons from the Financial Crisis