Are you getting 10 percent of the value from 100 percent of the bill?
Most 20 to 200 staff NZ businesses are paying for Microsoft 365 Business Standard or Premium per user, per month, every month. That is a significant annual spend. Almost none of them are using more than email, Word, Excel and Teams chat. SharePoint is a file dump. Intune is not configured. Defender is not tuned. Copilot is either unused, or worse, being used with no governance at all.
The platform is not the problem. The platform is huge. The problem is that no one has ever done the work of making it deliver against what you are paying for. That is the work this service does.
What does Microsoft 365 optimisation actually cover?
Microsoft 365 optimisation is a structured review and improvement of your M365 tenant across every layer that matters to an SMB: licensing, security, identity, collaboration tools, governance, backup and AI readiness. It is the difference between paying for a platform and actually using it.
A full OxygenIT Microsoft 365 optimisation engagement covers:
- A licence review that typically recovers 15 to 30 percent in overspend or under-licensed risk.
- Security hardening: MFA everywhere, conditional access, Defender for Endpoint and Defender for Office 365 tuning.
- Identity and access: group structure, guest access controls, privileged access review.
- Teams and SharePoint design: channels, permissions, file structure and lifecycle governance.
- Backup of your M365 data against both retention policy and ransomware scenarios.
- Copilot and AI readiness, including ISO 42001-aligned AI governance.
You end up with a tenant that is secure, efficient, well-governed and actually being used for what you are paying for.
When does a Christchurch or New Zealand SMB need Microsoft 365 optimisation?
Most owners and operations managers know the moment they need this. Here are the five clearest triggers:
- Your M365 bill has grown as headcount has grown, and no one has ever reviewed whether every user needs the licence they are on.
- MFA is not enforced on every account or conditional access policies have never been reviewed since the tenant was set up.
- SharePoint is a file dump with no permissions model, no lifecycle and files that staff cannot find without asking someone.
- You want to roll out Copilot but have not set up the governance, data boundaries or staff guidance that make it safe.
- You are pursuing a cyber insurance renewal or SMB1001 / ISO 27001 certification and need evidence that M365 is configured to current best practice.
If two or more of these sound familiar, you need a Microsoft 365 optimisation engagement.
What is included in OxygenIT’s Microsoft 365 optimisation?
Our M365 optimisation is delivered in six workstreams, scoped to your current licensing and risk profile. Every engagement ends with a written optimisation report, a tuned tenant and a governance model your team can actually maintain.
Licence review and right-sizing
Full audit of your current licence mix. Identify over-licensed users, under-licensed users and inactive accounts. Rebalance to the mix that actually matches how your team works. Most engagements recover 15 to 30 percent in licence waste or compliance risk.
Security hardening
MFA enforcement on every account. Conditional access policies reviewed and tuned. Defender for Endpoint and Defender for Office 365 configured against NCSC Critical Controls and Microsoft security baselines. Attack Surface Reduction rules enabled.
Identity and access management
Group structure, distribution list cleanup, guest access policy review, privileged role audit and just-in-time admin access where appropriate. Every account has the right access, no more, no less.
Teams and SharePoint design
A clean Teams and SharePoint structure with sensible defaults: channels, permissions, external sharing controls, document lifecycle and retention. Staff find what they need without opening a ticket.
Microsoft 365 backup
An independent backup of your M365 data (Exchange, SharePoint, OneDrive, Teams) that is separate from Microsoft's own retention. Ransomware-resilient. Restore-tested.
Copilot and AI readiness
Microsoft 365 Copilot data boundary controls, tenant readiness, pilot group design, staff guidance and ISO 42001-aligned governance documentation. You roll out Copilot with the productivity upside and without the governance risk.
How a Microsoft 365 optimisation works: your first 30, 60 and 90 days
First 30 days: assessment and quick wins
Full tenant assessment against the six workstreams. Licence review complete. Quick-win security hardening applied (MFA gaps, conditional access, known high-risk settings). You see immediate risk reduction inside the first month.
Days 30 to 60: core optimisation
Identity and access cleanup. Teams and SharePoint redesign and rollout to a pilot group. Backup architecture implemented. Copilot readiness assessment complete. Written optimisation report delivered.
Days 60 to 90: rollout and governance
Full rollout of the optimised tenant to all users. Staff briefing and quick-reference guides. Governance model in place. Handover to your ongoing support arrangement, whether that is OxygenIT or in-house.
Why Christchurch businesses choose OxygenIT for Microsoft 365 optimisation
Microsoft Partner with real depth
OxygenIT is an accredited Microsoft Partner with engineers who work in M365 tenants every day. Not a generalist firm dabbling in Microsoft. Our depth shows in the licence savings and the security findings.
Certified where it matters
Independently certified to ISO 27001 for information security and ISO 42001 for AI management. SMB1001:2026 assessor capability. We apply the same standards to your tenant that we apply internally.
We right-size licences, not up-sell
Our licence reviews genuinely save most clients money. We are not incentivised to push you to E5 when Business Premium will do the job. Vendor-neutral within the M365 stack.
20 years on the ground in Canterbury
Founded in Christchurch in 2005. Our Horner Street team knows the NZ SMB context. Our M365 designs reflect how NZ businesses actually work.
Copilot and AI governance built in
Because OxygenIT is ISO 42001 certified, every M365 optimisation includes Copilot readiness and AI governance as standard, not as a bolt-on.
How much does Microsoft 365 optimisation cost in New Zealand?
Microsoft 365 optimisation at OxygenIT is delivered as a fixed-fee project, scaled to the size and complexity of your tenant. Most engagements recover a significant portion of their fee in licence savings in the first 12 months. We do not publish hourly rates because every engagement is scoped to outcomes.
Essential Optimisation
For 20 to 50 staff firms with a straightforward Microsoft 365 tenant. Licence review, MFA and conditional access hardening, Teams and SharePoint cleanup, backup review. Fixed-fee project.
Standard Optimisation
For 50 to 100 staff firms with multiple sites, SharePoint libraries or compliance obligations. Full six-workstream optimisation including Copilot readiness and AI governance. Fixed-fee project.
Comprehensive Optimisation
For 100 to 200 staff firms, regulated industries or multi-entity groups. Full optimisation plus ISO 27001 or SMB1001:2026 alignment, multi-tenant consolidation scoping and extended Copilot rollout plan. Fixed-fee project.
Microsoft 365 Copilot, AI and ISO 42001
Microsoft 365 Copilot is one of the most significant productivity tools to hit SMBs in a decade. It is also one of the easiest ways to accidentally expose sensitive data, generate misleading content or breach privacy obligations if it is rolled out without governance.
OxygenIT is independently certified to ISO 42001, the international standard for AI management. Every M365 optimisation includes Copilot data boundary review, pilot group design, prompt guidance for staff, tenant sensitivity labelling and ISO 42001-aligned governance documentation. You get the Copilot upside and the governance framework at the same time.
Frequently asked questions about Microsoft 365 optimisation
01. What is Microsoft 365 optimisation?
Microsoft 365 optimisation is a structured review and improvement of your M365 tenant across licensing, security, identity and access, Teams and SharePoint, backup and Copilot readiness. It is the work of making sure you are getting the security and productivity you are paying for, not just paying for inboxes. A typical engagement uncovers 15 to 30 percent in licence waste and closes several security gaps.
02. Will I save money on my M365 bill?
Usually, yes. Most OxygenIT optimisation engagements recover 15 to 30 percent in licence waste or rebalance licence tiers so you pay for what you actually need. Savings depend on your starting point. Tenants that have grown without review tend to have the largest savings available.
03. Do you sell Microsoft licences?
We can procure Microsoft licences for you through our Microsoft partnership if you want a single relationship. We also work happily with existing licensing arrangements. The optimisation is the same regardless of where you buy your licences from. We do not upsell to drive licence margin.
04. How is this different from just migrating to Microsoft 365?
Migration gets you onto the platform. Optimisation gets the platform working for you. Migration is a one-off project. Optimisation assumes you are already on M365 and focuses on the configuration, security, governance and usage work that most migrations never had time for.
05. How much does Microsoft 365 optimisation cost in NZ?
M365 optimisation at OxygenIT is delivered as a fixed-fee project, scaled to the size and complexity of your tenant. We offer three tiers (Essential, Standard, Comprehensive) sized for 20 to 200 staff firms. Most engagements recover a significant portion of their cost in licence savings within the first 12 months. Ask for indicative pricing for your tenant size.
06. Will the optimisation disrupt my team?
Minimally. Most of the configuration work happens in the background. Staff-visible changes (Teams and SharePoint rollout, MFA enforcement where not already in place, Copilot pilots) are introduced with pre-announced communication and short training. Pilot groups are used to shake out issues before full rollout.
07. Do you cover Microsoft 365 Copilot?
Yes. Copilot readiness and governance is a standard part of every OxygenIT M365 optimisation. That includes data boundary controls, sensitivity labelling, pilot group design, staff prompt guidance and ISO 42001-aligned governance. You get the productivity upside without the governance risk.
08. Do you back up Microsoft 365?
Yes. Microsoft’s own retention is not a backup. It does not protect against ransomware, rogue administrator actions, long-term retention needs or complex restore scenarios. Every OxygenIT M365 optimisation includes an independent, immutable M365 backup covering Exchange, SharePoint, OneDrive and Teams.
09. What happens after the optimisation is complete?
You get a written optimisation report, a tuned tenant and a governance model. From there you can continue with OxygenIT on a Technology Alignment or Managed IT engagement, stay with your existing provider who can maintain the new configuration, or run it in-house with the documentation we hand over. No lock-in.
10. Do you only serve Christchurch, or all of New Zealand?
OxygenIT is based in Christchurch but delivers Microsoft 365 optimisation engagements across New Zealand. Discovery and pilot work is delivered in person where practical and remotely where efficient. Our Canterbury presence matters because it puts a local team behind you, not because it limits who we work with.
