SEC Chair Gary Gensler said investors demand more detailed information about how companies seek to curb the risk and costs of cyberattacks.