Budget 2026: what schools can act on now, and what the new cyber and sport funding means

01 / What the cyber funding actually buys

What the cyber funding actually buys

The Budget allocates an additional £24 million over 2026–27 to 2029–30 to strengthen public-sector AI cyber defences and make defensive tools available across public services. Schools are expressly named among the intended beneficiaries. This is a public-service investment announcement; the Treasury has not presented it as an individual school purchasing allowance.1

For leaders asking what their school qualifies for, the honest answer on 28 October is that school-level eligibility, allocation amounts, application instructions and deployment dates have not been established in the sources reviewed. We found no published route through which a school can currently claim this £24 million funding. Being mentioned as a beneficiary does not establish an entitlement for every maintained school, academy or independent school.1

The stated use is defensive capability. The announcement does not specify an approved shopping list for school firewalls, replacement devices, consultancy or staff training. Nor does it establish which tools a school will receive, whether delivery will be central or local, or who will operate them. Those are questions for implementation guidance, rather than gaps that a supplier or school should fill with assumptions.1

Keep a short readiness record: the services you depend on, who manages them, the gaps already verified and the decision owner. When delivery details arrive, compare the offer against those needs. Do not enter a purchase or change an existing contract on the expectation that this programme will reimburse it.

This is not a PHP-specific compensation or remediation fund. No source reviewed promises that a school affected by the alert will receive a payment. Continue necessary containment, verification and recovery work through the school’s established arrangements while monitoring the official delivery guidance.

02 / From the PHP alert to sustained assurance

From the PHP alert to sustained assurance

This is the next policy chapter in our PHP reporting. The practical connection is the same: leaders need evidence that important services are supported, maintained and recoverable. The Budget does not demonstrate that any particular PHP dependency has been corrected. It does not establish a new compromise, prove that an earlier interruption was an attack or remove the need for supplier verification.

Ask your IT lead or managed service provider to connect the outstanding technical actions from the PHP review to an owned service register. Record the affected service, its operator, the evidence of remediation, any exception and the date of the next check. A supplier statement should identify its scope; it should not be treated as assurance for unrelated systems.

DfE’s existing cyber standard already provides the relevant operational baseline. It calls for a backup plan, clear leadership ownership and testing that includes restoration. Our recommendation is to test a real school-day dependency with the safeguarding lead, business team and IT support. Establish what staff would use if the normal service became unavailable, and how restored information would be checked before normal work resumed.4

Specialist support can help where internal capacity is insufficient: vulnerability assessment, managed detection and response, incident preparation or independent verification. Commission a defined outcome, named responsibilities and evidence of completion. The existence of national investment is a reason to improve the brief for that support, rather than postpone necessary action.

03 / PE partnerships: a clearer access picture

PE partnerships: a clearer access picture

The Budget adds £60 million a year towards PE and sport partnerships in England, with rollout in 2027. The more useful access detail comes from DfE’s parliamentary answer: all state-funded schools are intended to access a universal offer, including training and professional development. Additional intervention and school-led grants will depend on the relevant criteria and application processes.12

That answer said the delivery partner would propose the detailed criteria for departmental approval. DfE’s enrichment guidance describes a spring 2027 start, while the parliamentary answer refers to delivery from April. These are forward delivery expectations. They do not amount to an application window opening on Budget day, or a confirmed allocation in an individual school budget.23

Prepare around participation rather than an imagined grant amount. Review which pupils are least well served, including pupils with SEND, the barriers they identify and the support staff need. Look at accessible facilities, transport, changing arrangements and links with local clubs. A concise baseline will make a request for help more credible once the route and criteria are published.

04 / The electricity check that can start now

The electricity check that can start now

Qualifying electricity in Great Britain has been zero-rated since 1 October. Today’s announcement proposes extending that treatment through 30 June 2027, with secondary legislation expected in early 2027. Gas is outside this electricity change. Northern Ireland has different current treatment. These are tax rules, separate from a supplier’s underlying unit rate and our observed wholesale electricity series.56

HMRC’s school-specific guidance matters: charitable status and non-business use can establish qualifying use, while residential accommodation has its own treatment. Do not assume that every supply to an educational institution qualifies. Mixed use and supplier declarations need checking against the actual premises and billing arrangement.5

Finance teams can compare October invoices with the supply’s documented eligibility and ask the supplier to explain any discrepancy. Record the account, meter, billing period, applied rate and supporting declaration. Assess the net budget effect after the organisation’s VAT recovery position; an invoice reduction and a cash saving are not automatically identical. Seek tax support where the use or recovery treatment is uncertain.

05 / A practical brief for the next leadership meeting

A practical brief for the next leadership meeting

Give the business manager one consolidated action record. Put existing invoice checks, continuing cyber work and future programme opportunities in separate rows, with a responsible person and a review date. Governors should be able to distinguish money already available from an announced national allocation that has not yet reached the school.

The announced National Living Wage is £13.21 from 1 April 2027. Review directly employed roles and contracted services that may be affected, without treating it as a replacement for teachers’ pay arrangements or other negotiated scales. Ask for the assumptions behind any supplier cost increase and identify when the school’s own contract permits a change.7

For cyber, request the remaining PHP exceptions and a proportionate recovery test. For PE, ask for a participation baseline and a named lead monitoring delivery guidance. For energy, request an evidenced invoice check. Each action should produce something the governing board can examine, rather than another general reassurance.

Leadership questions

Questions that turn the development into a governing conversation.

School Connection intelligence lens

What the national Observatory can add, and where it must stop.

School Connection’s assessment is that a useful response connects finance, digital leadership and participation. National policy should strengthen that shared decision process, with the delivery details tested before commitments are made.

What we are monitoring next

Publication is the beginning of the watch.

• Cyber delivery guidance, beneficiaries, deployment arrangements and any formal application route.
• PE partnership criteria and confirmed access arrangements.
• Electricity extension legislation and updated HMRC guidance.

Continue the evidence trail

How this develops our earlier coverage

• The parliamentary chapter of our PHP coverage ↗
• What evidence confirms the technical response? ↗