Meaningful, manageable KPIs for IT?

We recently got a new megaBoss (Boss's boss) who is very focused on KPIs, and asked all units, including IT for KPIs to measure performance.

We're finding it difficult to define meaningful metrics that are a measure of IT performance that aren't dependent on volume generated by other units. Things like $ of tickets, # of security reviews of new services/products, etc.

We considered time to ticket resolution, but we keep a lot of internal tickets for tracking, which we'd need to exclude. Also, we do NOT want to incentivize closing tickets to improve metrics, we know some other units that do that, and they will literally refuse to leave tickets open for long term issues that should absolutely be open.