A decade since the global financial crisis, the U.S. securities regulator is still struggling to get a grip on the country’s rating agencies because it lacks the tools and expertise needed to crunch growing reams of ratings data, people familiar with the effort say.