Your IT environment drifts. Usually without anyone noticing.
IT environments do not stay aligned on their own. A new staff member is onboarded without the full security baseline applied. A policy gets changed to fix an urgent issue, then never reverted. A backup job starts failing silently. A firmware update never runs. Three months later, your exposure has quietly grown and no one noticed.
Most 20 to 200 staff NZ businesses only find out about this drift when something breaks, when an insurer asks, or when an auditor walks in. By then the fix is expensive. A Technology Alignment Process catches drift before it becomes a problem.
What does a Technology Alignment Process actually do?
The Technology Alignment Process (TAP) is a scheduled review of your IT environment against a defined best-practice baseline. Every quarter, a dedicated alignment engineer works through a structured checklist: security controls, backup health, patching, Microsoft 365 configuration, documentation, endpoint posture. Findings get logged, scored and tracked quarter over quarter.
Every quarter, the OxygenIT Technology Alignment Process delivers:
- A full alignment review against our standards library (500+ checkpoints).
- A posture score trend, showing whether your environment is improving or drifting.
- A prioritised remediation list, ranked by business risk.
- A documentation refresh so that runbooks, diagrams and credentials stay current.
- An executive summary for your leadership team.
A TAP is not a helpdesk service. It is the ongoing engineering discipline that keeps your environment healthy between incidents.
When does a Christchurch or New Zealand business need a Technology Alignment Process?
Most owners know the moment they need one. Here are the five clearest triggers:
- You have just completed a Technical Business Review and want to make sure the findings get actioned and stay actioned.
- You have a managed IT provider who is good at fixing things but never proactively reviews your environment.
- Your cyber insurer is asking about controls that you put in place 18 months ago, and you are not sure if they are still working.
- You are preparing for SMB1001 or ISO 27001 certification and need evidence of ongoing control effectiveness, not just a point-in-time snapshot.
- You have grown past 20 staff and your documentation has not kept up. New hires take weeks to get fully productive.
If two or more of these sound familiar, you need a Technology Alignment Process.
What is included in OxygenIT’s Technology Alignment Process?
We call it the Oxygen Alignment Cycle. It delivers six alignment workstreams, repeated on a quarterly cadence, with a published standards library and measurable posture scoring.
Security baseline alignment
Every quarter we re-measure your security controls against the NCSC Critical Controls, NZISM and SMB1001:2026. MFA coverage, privileged access, conditional access, patch status, endpoint protection. Drift is logged and scored.
Backup and recovery verification
We verify backups are running, verify restores are working and measure recovery time objectives against your agreed targets. Not just an email saying the job completed.
Microsoft 365 configuration alignment
Tenant-level configuration, licence mix, conditional access policies, external sharing controls, data loss prevention and compliance configuration. We keep your M365 setup tight as Microsoft changes the defaults underneath you.
Endpoint and patch posture
Endpoint inventory, patch status, antivirus and EDR coverage, encryption status and compliance with your defined endpoint baseline. Exceptions are documented and owned.
Documentation refresh
Network diagrams, runbooks, credentials, vendor contacts and standard operating procedures. Kept current so that when something goes wrong, the response does not start with a scavenger hunt.
Quarterly alignment report
A written alignment report, a posture score trend chart and a prioritised remediation list, delivered to your leadership team every quarter. Board-ready, owner-readable, auditor-acceptable.
How the Oxygen Alignment Cycle works: your first 30, 60 and 90 days
First 30 days: baseline and onboarding
We run the first full alignment review. Your environment is measured against the OxygenIT standards library and scored. Documentation is captured and refreshed. You get a baseline posture score and the first remediation list.
Days 30 to 60: remediation in progress
Priority one and two items from the remediation list are worked through, with regular progress updates. Every change is documented. Any remaining exceptions are explicitly accepted or assigned an owner.
Days 60 to 90: cadence locked in
Quarterly alignment cadence is established. Next alignment review scheduled. Executive reporting rhythm confirmed with your leadership team. From day 91 onwards, you have a predictable, measurable alignment process.
Why Christchurch businesses choose OxygenIT for Technology Alignment
A defined standards library
Over 500 alignment checkpoints across security, operations, backup, M365 and documentation. Not made up per engagement. Published, versioned and updated as NZ standards change.
A posture score that trends over time
You do not just get a snapshot. You get a measurable posture score that trends quarter over quarter. Improving, stable or drifting. Boards and owners can see the trajectory.
Certified where it matters
Independently certified to ISO 27001 for information security and ISO 42001 for AI management. SMB1001:2026 assessor capability. We apply the same standards internally that we measure on externally.
A dedicated alignment engineer
Your alignment work is done by a named engineer, not a rotating pool. Continuity matters because drift is only visible if the same person has seen the environment before.
Separate from helpdesk
Alignment is a different discipline to reactive support. At OxygenIT, alignment engineers do not take helpdesk tickets. Their whole job is catching drift and preventing incidents.
How much does a Technology Alignment Process cost in New Zealand?
The Technology Alignment Process at OxygenIT is delivered as a monthly retainer that scales with the size and complexity of your IT environment. We offer three tiers, sized for 20 to 200 staff firms. We do not publish hourly rates because every engagement is scoped to outcomes.
Oxygen Alignment Essential
For 20 to 50 staff firms with a straightforward Microsoft 365 and cloud footprint. Quarterly alignment review, baseline standards library, posture scoring. Priced from a monthly retainer.
Oxygen Alignment Standard
For 50 to 100 staff firms with multiple sites, mixed cloud and on-premise, or compliance obligations. Quarterly alignment review with monthly documentation refresh and mid-quarter check-ins. Priced from a monthly retainer.
Oxygen Alignment Comprehensive
For 100 to 200 staff firms, regulated industries or multi-entity groups. Quarterly alignment, monthly refresh, compliance mapping to ISO 27001 or SMB1001:2026 and embedded alignment engineer. Priced from a monthly retainer.
How the Technology Alignment Process supports your compliance and insurance position
Most compliance frameworks, from SMB1001:2026 to ISO 27001 to the NCSC Critical Controls, require evidence of ongoing control effectiveness, not just a point-in-time audit. A Technology Alignment Process gives you that evidence.
Every quarterly alignment report captures when controls were tested, what was found, what was fixed and what is outstanding. When an auditor, insurer or customer asks whether your controls are actually working, you have a documented trail. The same report supports annual cyber insurance renewals, customer security questionnaires and board reporting.
Frequently asked questions about Technology Alignment
01. What is a Technology Alignment Process?
A Technology Alignment Process (TAP) is a scheduled, standards-based review of your IT environment, repeated every quarter, that measures your current state against a defined best-practice baseline. It produces an alignment report, a posture score, a remediation list and refreshed documentation. It is how NZ businesses keep their IT environment aligned, not just operational.
02. How is a Technology Alignment Process different from a Technical Business Review?
A Technical Business Review is a one-off, deep independent audit of your IT environment. A Technology Alignment Process is an ongoing, quarterly discipline that keeps you aligned after the baseline has been set. Many clients start with a Technical Business Review and then engage Technology Alignment to make sure the findings get actioned and stay actioned.
03. Do I need managed IT services to get Technology Alignment?
No. OxygenIT delivers Technology Alignment as a standalone service. You can keep your existing IT provider and still engage us for the quarterly alignment review. Many clients use it as an independent second opinion on their incumbent provider’s work.
04. How often do you run alignment reviews?
Quarterly at a minimum. Standard and Comprehensive tiers include monthly documentation refreshes and mid-quarter check-ins. Frequency is matched to your business risk profile, regulatory obligations and change rate.
05. What standards do you align against?
The OxygenIT standards library includes the NCSC Critical Controls, NZISM, Privacy Act 2020 obligations, SMB1001:2026, Microsoft 365 security defaults and CIS benchmarks. We map your alignment against whichever frameworks are relevant to your industry and customer contracts.
06. How much does Technology Alignment cost in NZ?
Technology Alignment at OxygenIT is delivered as a monthly retainer that scales with the size and complexity of your environment. We offer three tiers (Essential, Standard, Comprehensive) sized for 20 to 200 staff firms. We do not publish hourly rates because every engagement is scoped to outcomes. Ask for indicative pricing for your business size.
07. Who on my team will the alignment engineer work with?
Typically your operations lead or office manager for access and scheduling, and your leadership team for the quarterly report. The alignment work itself is largely invisible to your staff. We are not in their way day to day.
08. What happens if the alignment review finds a serious issue?
Serious findings are raised immediately, not held to the end of the quarter. Critical risks go straight to your nominated incident contact. For everything else, findings are ranked by business risk and delivered in the quarterly alignment report with a prioritised remediation plan.
09. Does Technology Alignment cover AI tools and ISO 42001?
Yes. OxygenIT is independently certified to ISO 42001, the international standard for AI management systems. Your alignment review covers AI tool inventory, shadow AI risk, Microsoft 365 Copilot configuration and governance controls. You get the AI productivity upside without carrying the governance risk.
10. Do you only serve Christchurch, or all of New Zealand?
OxygenIT is based in Christchurch but delivers Technology Alignment across New Zealand. On-site work is delivered in person where practical and remotely where efficient. Our Canterbury presence matters because it puts a local team behind you, not because it limits who we work with.
