Professional IT services: Microsoft 365 optimisation
Microsoft 365 optimisation in Christchurch and New Zealand
A fixed-fee review and tune-up of your Microsoft 365 tenant across licensing, security, identity, Teams and SharePoint, backup and Copilot readiness. For businesses of 20 to 200 staff. Delivered in 90 days, with a written report and a tenant your team can actually maintain.
Or call 0800 242 206
Are you getting 10 percent of the value from 100 percent of the bill?
Most 20 to 200 staff New Zealand businesses are paying for Microsoft 365 Business Standard or Premium for every user, every month. That is a significant annual spend. Almost none of them are using more than email, Word, Excel and Teams chat. SharePoint is a file dump. Intune is not configured. Defender is not tuned. Copilot is either unused, or worse, being used with no governance at all.
The platform is not the problem. The platform is huge. The problem is that no one has ever done the work of making it deliver against what you are paying for. That is the work this service does.
What does Microsoft 365 optimisation actually cover?
Microsoft 365 optimisation is a structured review and improvement of your tenant across every layer that matters to an SMB: licensing, security, identity, collaboration tools, governance, backup and AI readiness. It is the difference between paying for a platform and actually using it.
A full OxygenIT Microsoft 365 optimisation engagement covers:
- A licence review that finds over-licensed users, under-licensed risk and inactive accounts.
- Security hardening: MFA everywhere, conditional access, Defender for Endpoint and Defender for Office 365 tuning.
- Identity and access: group structure, guest access controls, privileged access review.
- Teams and SharePoint design: channels, permissions, file structure and lifecycle governance.
- Backup of your Microsoft 365 data against both retention policy and ransomware scenarios.
- Copilot and AI readiness, including ISO/IEC 42001:2023-aligned AI governance.
You end up with a tenant that is secure, efficient, well governed and actually being used for what you are paying for.
When does a Christchurch or New Zealand SMB need Microsoft 365 optimisation?
Most owners and operations managers know the moment they need this. Here are the five clearest triggers:
- Your Microsoft 365 bill has grown as headcount has grown, and no one has ever reviewed whether every user needs the licence they are on.
- MFA is not enforced on every account, or conditional access policies have never been reviewed since the tenant was set up.
- SharePoint is a file dump with no permissions model, no lifecycle and files that staff cannot find without asking someone.
- You want to roll out Copilot but have not set up the governance, data boundaries or staff guidance that make it safe.
- You are pursuing a cyber insurance renewal or SMB1001 or ISO/IEC 27001:2022 certification and need evidence that Microsoft 365 is configured to current best practice.
If two or more of these sound familiar, you need a Microsoft 365 optimisation engagement.
What is included in OxygenIT Microsoft 365 optimisation?
Our Microsoft 365 optimisation is delivered in six workstreams, scoped to your current licensing and risk profile. Every engagement ends with a written optimisation report, a tuned tenant and a governance model your team can actually maintain.
Licence review and right-sizing
Full audit of your current licence mix. Identify over-licensed users, under-licensed users and inactive accounts. Rebalance to the mix that actually matches how your team works. Most engagements recover licence waste or close a compliance gap.
Security hardening
MFA enforcement on every account. Conditional access policies reviewed and tuned. Defender for Endpoint and Defender for Office 365 configured against the NCSC Critical Controls and Microsoft security baselines. Attack surface reduction rules enabled.
Identity and access management
Group structure, distribution list cleanup, guest access policy review, privileged role audit and just-in-time admin access where appropriate. Every account has the right access, no more, no less.
Teams and SharePoint design
A clean Teams and SharePoint structure with sensible defaults: channels, permissions, external sharing controls, document lifecycle and retention. Staff find what they need without opening a ticket.
Microsoft 365 backup
An independent backup of your Microsoft 365 data (Exchange, SharePoint, OneDrive, Teams) that is separate from Microsoft’s own retention. Ransomware-resilient. Restore-tested. The wider plan sits in our business continuity service.
Copilot and AI readiness
Microsoft 365 Copilot data boundary controls, tenant readiness, pilot group design, staff guidance and ISO/IEC 42001:2023-aligned governance documentation. You roll out Copilot with the productivity upside and without the governance risk.
How a Microsoft 365 optimisation works: your first 30, 60 and 90 days
First 30 days: assessment and quick wins
Full tenant assessment against the six workstreams. Licence review complete. Quick-win security hardening applied (MFA gaps, conditional access, known high-risk settings). You see immediate risk reduction inside the first month.
Days 30 to 60: core optimisation
Identity and access cleanup. Teams and SharePoint redesign and rollout to a pilot group. Backup architecture implemented. Copilot readiness assessment complete. Written optimisation report delivered.
Days 60 to 90: rollout and governance
Full rollout of the optimised tenant to all users. Staff briefing and quick-reference guides. Governance model in place. Handover to your ongoing support arrangement, whether that is OxygenIT or in-house.
Why Christchurch businesses choose OxygenIT for Microsoft 365 optimisation
Engineers who work in Microsoft 365 tenants every day
Not a generalist firm dabbling in Microsoft. Our depth shows in the licence savings and the security findings. Worth stating plainly: OxygenIT is not a Microsoft Partner. A partner badge describes what a supplier sells. It is not an audit of how well they configure what you own.
Certified where it matters
Independently certified to ISO/IEC 27001:2022 for information security and ISO/IEC 42001:2023 for AI management (as at May 2026), audited annually. SMB1001:2026 assessor capability. We apply the same standards to your tenant that we apply internally.
We right-size licences, not upsell
Our licence reviews save most clients money. We are not incentivised to push you to E5 when Business Premium will do the job. Vendor neutral within the Microsoft 365 stack.
Over 20 years on the ground in Canterbury
Founded in Christchurch in 2005, with engineers in Auckland, Wellington and Christchurch. We know the New Zealand SMB context, and our Microsoft 365 designs reflect how New Zealand businesses actually work.
Copilot and AI governance built in
Because OxygenIT is certified to ISO/IEC 42001:2023, every Microsoft 365 optimisation includes Copilot readiness and AI governance as standard, not as a bolt-on.
How much does Microsoft 365 optimisation cost in New Zealand?
Microsoft 365 optimisation at OxygenIT is delivered as a fixed-fee project, scaled to the size and complexity of your tenant. Most engagements recover a share of their fee in licence savings in the first 12 months. We do not publish hourly rates for this service because every engagement is scoped to outcomes. Ask for indicative pricing on the founder call, and see every price we do publish.
Essential Optimisation
For 20 to 50 staff firms with a straightforward Microsoft 365 tenant. Licence review, MFA and conditional access hardening, Teams and SharePoint cleanup, backup review. Fixed-fee project.
Standard Optimisation
For 50 to 100 staff firms with multiple sites, SharePoint libraries or compliance obligations. Full six-workstream optimisation including Copilot readiness and AI governance. Fixed-fee project.
Comprehensive Optimisation
For 100 to 200 staff firms, regulated industries or multi-entity groups. Full optimisation plus ISO/IEC 27001:2022 or SMB1001:2026 alignment, multi-tenant consolidation scoping and an extended Copilot rollout plan. Fixed-fee project.
Microsoft 365 Copilot, AI and ISO 42001
Microsoft 365 Copilot is one of the most significant productivity tools to reach SMBs in a decade. It is also one of the easiest ways to accidentally expose sensitive data, generate misleading content or breach privacy obligations if it is rolled out without governance.
OxygenIT is independently certified to ISO/IEC 42001:2023, the international standard for AI management systems. Every Microsoft 365 optimisation includes Copilot data boundary review, pilot group design, prompt guidance for staff, tenant sensitivity labelling and ISO/IEC 42001:2023-aligned governance documentation. You get the Copilot upside and the governance framework at the same time. See what AI governance costs as a standalone service.
Frequently asked questions about Microsoft 365 optimisation
What is Microsoft 365 optimisation?
Microsoft 365 optimisation is a structured review and improvement of your tenant across licensing, security, identity and access, Teams and SharePoint, backup and Copilot readiness. It is the work of making sure you are getting the security and productivity you are paying for, not just paying for inboxes. A typical engagement uncovers licence waste and closes several security gaps.
Will I save money on my Microsoft 365 bill?
Usually, yes. Most OxygenIT optimisation engagements recover licence waste or rebalance licence tiers so you pay for what you actually need. Savings depend on your starting point. Tenants that have grown without review tend to have the largest savings available. We will not promise a number before we have seen the tenant.
Do you sell Microsoft licences?
Yes. We can supply Microsoft licences if you want a single relationship, with a published 23 percent licence margin. We also work happily with your existing licensing arrangement. The optimisation is the same regardless of where you buy your licences, and we do not upsell to drive licence margin.
How is this different from just migrating to Microsoft 365?
Migration gets you onto the platform. Optimisation gets the platform working for you. Migration is a one-off project. Optimisation assumes you are already on Microsoft 365 and focuses on the configuration, security, governance and usage work that most migrations never had time for.
How much does Microsoft 365 optimisation cost in New Zealand?
Microsoft 365 optimisation at OxygenIT is delivered as a fixed-fee project, scaled to the size and complexity of your tenant. We offer three tiers (Essential, Standard, Comprehensive) sized for 20 to 200 staff firms. Most engagements recover a share of their cost in licence savings within the first 12 months. Ask for indicative pricing for your tenant size, and see the prices we do publish.
Will the optimisation disrupt my team?
Minimally. Most of the configuration work happens in the background. Staff-visible changes (Teams and SharePoint rollout, MFA enforcement where not already in place, Copilot pilots) are introduced with pre-announced communication and short training. Pilot groups are used to shake out issues before full rollout.
Do you cover Microsoft 365 Copilot?
Yes. Copilot readiness and governance is a standard part of every OxygenIT Microsoft 365 optimisation. That includes data boundary controls, sensitivity labelling, pilot group design, staff prompt guidance and ISO/IEC 42001:2023-aligned governance. See our AI governance pricing for the standalone service.
Do you back up Microsoft 365?
Yes. Microsoft’s own retention is not a backup. It does not protect against ransomware, rogue administrator actions, long-term retention needs or complex restore scenarios. Every OxygenIT Microsoft 365 optimisation includes an independent, immutable backup covering Exchange, SharePoint, OneDrive and Teams, and the wider recovery plan sits in our business continuity service.
What happens after the optimisation is complete?
You get a written optimisation report, a tuned tenant and a governance model. From there you can continue with OxygenIT on a Technology Alignment Process or a managed IT engagement, stay with your existing provider who can maintain the new configuration, or run it in-house with the documentation we hand over. No lock-in.
Do you only serve Christchurch, or all of New Zealand?
OxygenIT is based in Christchurch, with engineers in Auckland, Wellington and Christchurch, and delivers Microsoft 365 optimisation engagements across New Zealand. Discovery and pilot work is delivered in person where practical and remotely where efficient. Our Canterbury presence matters because it puts a local team behind you, not because it limits who we work with.
Talk to a founder about your Microsoft 365 tenant
Fifteen minutes with a founder, not a sales rep. Bring your licence count and your last invoice and we will tell you plainly whether an optimisation is likely to pay for itself.
Or call 0800 242 206
