Regulation, supervision must stay risk-based, tech-neutral: Malhotra