GLBA Risk Assessment for HigherEd

I was recently asked to take over the annual GLBA Risk Assessment process at my HigherEd institution. The previous employee barely left any help or guidance, only interview notes from previous assessments. I reviewed the documentation on the FTC website, but it was sparse at best. Here are a few questions I have:

• Is there a standard risk assessment questionnaire I can use? Can't seem to find anything from the FTC website.
• I have a list of the previous application that were in scope for the previous risk assessment, but how can I find out if there are any new applications or systems that are now within GLBA scope?
• Besides the Risk Assessment and training, is there anything else that I need to worry about in order to be compliant?

Any help would be much appreciated. I'm a bit overwhelmed at the moment, with no guidance from upper management.