A Stormont review into vulnerable prisoners is not expected to be finished until next year – over three and a half years after an “immediate review” was first announced.