The MTA update came in response to an annual report by state Controller Thomas DiNapoli's office on the electronic security program, which also includes 1,400 access-control devices and regional command centers. His report states that the final pieces are unlikely to be completed until 2017.