The head of the leading U.S. cybersecurity agency said it is too early to know whether its new rule on cyber incident reporting will be affected by a landmark Supreme Court decision limiting the power of regulators.