Pandey said there is a shift to risk-based oversight; flags four Ts as guiding principles