Does anyone have any guidance, tips, and/or templates to share to help establish Identity Access Management governance as a part of an overarching Identity Governance and Administration program?

Check research by Rebecca Archambault too

Here's a template that you can use: 

1. Executive Summary
Background: Explain the objectives and risks and reasons the IAM is needed. 
Specify the IAM governance scope (e.g., user access to systems, privileged access, etc.)
Objectives: Improve security, compliance, or operational efficiency.

2. Identify stakeholders
Business Units: Engage affected department leaders.
Legal & Compliance: Assure framework compliance.
IT Teams: System administrators, security analysts, and others will install and manage IAM systems.

3. Risk Assessment
Asset Identification: List IAM-covered systems, applications, and data.
Threat modeling: Identify insider and unauthorized access risks. 
Suggest risk mitigation strategies.

4. Policymaking
Access Control Policies: Specify roles, permissions, and assignment/revocation.
Policies: Define authentication mechanisms (e.g., two-factor authentication, biometrics).
Audit and Monitoring Policies: Decide how and when to audit access.

5. Technology Choice
Product Evaluation: Define must-have and nice-to-have features, then explore the market for IAM solutions that fulfill them.
Determine vendor competence, scalability, and system compatibility.

6. Plan Implementation Timeline: Explain the rollout of each component in phases.
Each step requires people and financial resources. 

7. Training and Awareness
Create end-user and administrative training modules.
Keep employees informed and watchful with continual awareness initiatives.

8. Audits and Monitoring
Establish KPIs to evaluate IAM governance.
Schedule frequent audits to verify policy compliance.

9. Feedback Loop
Collect end-user and stakeholder input to enhance IAM governance. 

10. Check and Update
Review the IAM governance structure periodically to reflect lessons learned, comments, and technical or business changes.