An IS auditor is reviewing how an organization measures the effectiveness of its IT function. Management reports IT performance solely through server uptime percentages and help desk ticket resolution times. The board has expressed concern that it cannot tell whether IT investments are advancing the corporate strategy. Which recommendation should the auditor MOST strongly make to address the board's concern?