During a review of an organization's newly launched data governance program, an IS auditor finds that data quality issues in the customer master file keep recurring. The IT operations team applies technical fixes each time errors are reported, but no one in the business is designated as accountable for defining acceptable data quality rules or authorizing corrections. What should the auditor recommend as the MOST effective way to address the root cause?