For NZ organisations with 300+ staff
Governed AI across your organisation in 90 days.
The 90-Day AI Challenge puts AI into production across your departments, with governance aligned to ISO/IEC 42001 built in from day one. Delivered 1:1 by Tim Clarkson, from a firm that runs its own AI on a certified management system. Fixed fee from $45,000 + GST.
You leave the briefing with your AI risk position and a scoped 90-day plan, whether or not you go ahead.
ISO/IEC 42001 + ISO/IEC 27001 certified (as at May 2026). 20+ years. 100+ NZ organisations supported since 2005. 98% client retention (Canterbury, 2022-2025).
The board question
Your people are already using AI. Can you prove it is governed?
88%
of AI proofs-of-concept never reach production.
IDC Enterprise Survey, March 2025
63%
of breached organisations had no AI governance policy, or were still writing one.
IBM Cost of a Data Breach Report, 2025
6%
of organisations achieve meaningful financial impact from AI.
McKinsey Global Survey, November 2025
Why scale changes the question
Three problems that do not show up in a 20-person business
Shadow AI at scale
Hundreds of staff, dozens of tools, and no inventory of which client or staff data is going where.
Assurance is being asked
Insurers, enterprise clients, funders and your board now send AI questionnaires. Someone has to answer them with evidence.
Adoption is uneven
Pilots stall in one team. The 20/60/20 split repeats in every department: 20% adopt early, 60% follow the wins, 20% wait until it is normal.
ISO/IEC 42001
Every consultant advises on responsible AI. We are audited on it.
ISO/IEC 42001:2023 is the international standard for AI management systems: the AI equivalent of ISO 27001. OxygenIT operates a certified AI management system, alongside our ISO/IEC 27001 certified information security management system.
| Standard | ISO/IEC 42001:2023, Artificial Intelligence Management System |
|---|---|
| Certifying body | Compass Assurance Services (JAS-ANZ accredited) |
| Certificate | 8536-4213-01, certified 12 May 2026, valid to 12 May 2029 |
| Scope | Configuration, deployment and use of AI systems and AI agents to support the delivery of managed IT services |
What it means for you
We build your AI governance with the same discipline an independent auditor checks us on every year. Not a framework we read about.
What it is not
The challenge does not certify your organisation, and the certificate is not a product label. You get a governance foundation you could take to certification if you choose to.
The Oxygen AI Framework
The 90-Day AI Challenge: Audit. Activate. Accelerate.
Not a training course. Not a consulting report. A governed implementation, with a decision gate at the end of each month.
Month 1
Audit
- AI inventory: every tool in use and the data it touches
- Risk register and AI impact assessments
- Processes mapped, use cases scored
- Board-ready business case
Day 30 gate: your executive team approves the use cases and the policy.
Month 2
Activate
- AI policy and acceptable use live across the organisation
- Champions trained in each department
- Custom CRIT prompt templates for your processes
- First governed use case in production
Day 60 gate: first use case measured, rollout plan approved.
Month 3
Accelerate
- Rollout to further departments using 20/60/20
- Adoption, hours saved and quality tracked
- Board reporting pack
- Handover to a named internal owner
Day 90 gate: a working, governed system your people run.
What you walk away with
At the end of 90 days, your organisation has:
Governance framework
AI policy, acceptable use rules, risk register and impact assessments, aligned to ISO/IEC 42001. Not a certification, but the foundation for one.
AI in production
Governed use cases live in your own tenant, with custom templates built for your processes. Not generic. Yours.
Trained champions
Not just shown how. Supported through actual adoption in each department using the 20/60/20 model.
Board reporting
Hours saved, output quality, adoption and risk in one pack. The answer to the board question.
Investment
Published pricing. Scoped on the briefing.
| What | Includes | From (excl. GST) |
|---|---|---|
| 90-Day AI Challenge | Audit, Activate and Accelerate, delivered 1:1 by Tim with your executive sponsor. Fixed fee, agreed before you start. | $45,000 |
| Managed AI Governance | After handover: visibility of AI tools in use, policy reviews, quarterly AI health check and board reporting refresh. | $25 per user per month |
The fixed fee depends on the number of departments and use cases in scope, confirmed in writing after the executive briefing.
How it runs
Founder-led, with clear decision gates
Tim Clarkson, Managing Director and Chief Security Officer
Tim leads every engagement personally. He has spent 20+ years in cyber security and business resilience, and led OxygenIT to ISO/IEC 27001 and ISO/IEC 42001 certification, which it holds as at May 2026. He ran AI in production inside OxygenIT before offering it to anyone else.
- Weekly working session with your executive sponsor and AI champions.
- Decision gates at day 30, 60 and 90. Your ELT or board approves each phase before the next begins.
- Handover to a named owner. Your people run it. Managed AI Governance keeps it current.
- Limited places. Because Tim delivers 1:1, we run a small number of challenges at a time.
Is this for you?
This is for you if
- You lead an NZ organisation with 300 or more staff.
- Your board, insurer or clients are asking how AI is controlled.
- Staff are already using AI tools you have not approved.
- You want AI in production across departments, not another pilot.
This is not for you if
- You have fewer than 300 staff. Our Crawl, Walk, Run programme starts from $3,500 and fits better.
- You want a software demo. This is a governed implementation, not a tool sale.
- You want a report for the shelf. Your people have to be in the room.
Questions
What executive teams ask us
Will this get our organisation certified to ISO/IEC 42001?
No, and we will not pretend otherwise. You get the governance foundation the standard expects: AI policy, risk register, impact assessments and an AI inventory. If you then choose to pursue certification, you start well ahead.
What does the $45,000 cover?
The full 90 days: Audit, Activate and Accelerate, delivered 1:1 by Tim, including the governance framework, the first governed use cases in production, champion training and board reporting. The final fixed fee depends on departments and use cases in scope, and is agreed in writing before you start.
We already have Microsoft Copilot across the organisation. Do we still need this?
Especially then. Licences without governance and adoption produce scattered results and quiet data risk. The challenge turns licences you already pay for into measured, governed productivity.
What happens to our data?
Data handling is designed in before any tool is rolled out. Builds happen in your own tenant. Our own AI use runs under our certified AI management system and our ISO/IEC 27001 information security controls.
What happens after 90 days?
Your named owner runs the system. Most organisations add Managed AI Governance from $25 per user per month to keep policy, tooling and board reporting current as models and tools change.
Book a 45-minute executive briefing
Your AI risk position and a scoped 90-day plan. Tim runs the briefing himself. If it is not a fit, he will tell you.
Executive briefing
Pick a time for your 45-minute briefing
Tim runs it himself, on Microsoft Teams. You leave with your AI risk position and a scoped 90-day plan.
