The regulatory use of banks' internal models makes capital requirements more risk-sensitive but invites regulatory arbitrage. I develop a framework to study bank regulation with strategic selection of risk models. A bank supervisor can discourage arbitrage by auditing risk models, and implements...