While the Dodd-Frank Act (DFA) broadens the regulatory reach to reduce systemic risks to the U.S. financial system, it does not address some important risks that could migrate to or emanate from entities outside the federal safety net. At the same time, it limits the types of interventions by financial authorities to address systemic events when they occur. As a result, a broad and forward-looking monitoring program, which seeks to identify financial vulnerabilities and guide the development of preemptive policies to help mitigate them, is essential. Systemic vulnerabilities arise from market failures that can lead to excessive leverage, maturity transformation, interconnectedness, and complexity. These vulnerabilities, when hit by adverse shocks, can lead to fire-sale dynamics, negative feedback loops, and inefficient contractions in the supply of credit. We present a framework that centers on the vulnerabilities that propagate adverse shocks, rather than shocks themselves, which are difficult to predict. Vulnerabilities can emerge in four areas: 1) systemically important financial institutions (SIFIs), 2) shadow banking, 3) asset markets, and 4) the nonfinancial sector. This framework also highlights how policies that reduce the likelihood of systemic crises may do so only by raising the cost of financial intermediation in noncrisis periods.