Abstract: Systems to establish a security profile may include a memory to store original text from security questionnaires, and values associated with the original text from the questionnaires, the values indicating a section, a control, or a question of the original text. The system may also include a processing unit. The processing unit can identify a set of latent topics present in the original text from the stored security questionnaires, score the original text based on presence or absence of latent topics, receive a new security questionnaire, score the new text from the new security questionnaire based on presence or absence of latent topics, compute a distance between the scored original text from the stored security questionnaires and the scored new text from the new security questionnaire, and link the original text to the new text with a smallest distance between.