AI in Schools
Federal budget thin on ed-tech, Vic centralises school IT
The morning after the budget, and the sector readout is thinner than the pre-budget noise had predicted. Education got named, in places, but the school cyber line that Canvas was supposed to force into the speech never landed.
The federal budget gave education thin lines and TEQSA more teeth
Treasurer Jim Chalmers handed down the 2026-27 Budget at 7.30pm AEST Tuesday. The portfolio specifics for the sector are modest. TEQSA gets $9.4 million over four years to expand its enforcement reach. The CSIRO STEM Professionals in Schools program is extended at $5.9 million. The much-flagged AI Accelerator weighs in at up to $70 million across the economy, not earmarked for education. Cyber spend sits at $89.3 million over four years to sustain existing capability and $1.3 billion over five years for ASD-led national defences, neither of them a school-sector cyber line.
Why this matters: For SBMs and pro-vice-chancellors who spent last week pre-positioning communications, the day-after read is simple. The Canvas incident did not move the federal budget on a school-specific cyber envelope. The strongest line for the sector is regulatory, not financial: TEQSA gets more enforcement weight, which translates into more compliance work at the university level rather than more dollars for resilience. The AI Accelerator is large enough to matter, but only if education-adjacent applicants compete for it. Both lines change the operating posture without changing the budget envelope. Treasurer Chalmers's Budget speech text, and Honi Soit's sector-by-sector readout, including TEQSA's $9.4 million.
Universities Australia says the budget pulls $800 million off research, and the response is sharp
Universities Australia's formal response, signed by Chair Carolyn Evans and CEO Luke Sheehy, calls the budget "a package of measures to boost research, development and innovation" while flagging that it removes $800 million from university researchers and axes Australia's Economic Accelerator. The peak body welcomed the new National Resilience and Science Council, the Horizon Europe commitment and the Medical Research Future Fund boost, but the headline number is the loss.
Why this matters: For council and risk-committee agendas, the $800 million figure is the one that matters for 2027 planning. With the Managed Growth Funding system arriving in 2027 and ATEC running the Total Allocation Pool, universities lose flexibility on research income and gain a regulator-allocated quota for teaching income at the same time. The financial posture for the next planning cycle is tighter, not looser. The decision points for vice-chancellors over the next eight weeks are which research programs survive the cut, which teaching-research blocks get rebalanced, and how the international student contribution gets defended in council against further policy volatility. Universities Australia's full response to the 2026-27 federal budget.
Victoria pulled school IT onto a single tenant, and called it a cyber response
The Victorian state budget allocates $30 million over two years to migrate government schools currently running independent IT systems onto centralised platforms managed by the Department of Education. The stated objectives are reducing cybersecurity risks and improving consistency. A separate $30 million establishes a Digital, AI and Technology TAFE Centre of Excellence at Chisholm Institute's Frankston campus.
Why this matters: This is what the federal budget did not do, done at state level. Victoria is treating school-level cyber risk as a centralisation problem rather than a school-level capability problem, and the model is one tenant the Department can patch, monitor and audit centrally. For Victorian SBMs the practical question over the next twelve months is which of their current independent platforms get migrated, on what timeline, and what the contractual exit costs look like for incumbents. For vendors selling into Victorian schools, the read is that the procurement frame is shifting from per-school deals to Department-managed contracts, and the suppliers that cannot meet a single-tenant security baseline will lose the line. ACS Information Age on the Victorian digital overhaul, and the Victorian Budget 2026-27 schools portal.
Canvas closed with a payment, and the contract clauses just opened
Instructure confirmed Monday it had reached an agreement with ShinyHunters, retrieved the stolen data, and received digital confirmation of data destruction via shred logs. The amount is undisclosed. The company's statement included the candid line that "there is never complete certainty when dealing with cyber criminals". The agreement also covers all Instructure customers, with the group's commitment that no customers will be separately extorted as a result of the incident.
Why this matters: The operational story is closing. The contractual story is just opening. Australian institutions that signed Canvas tenancy agreements in 2024 will be working through May and June on whether existing contracts cover a vendor that paid a ransom, whether the indemnity language extends to data destruction the vendor cannot independently verify, and whether the renewal cycle through Q3 changes posture. The risk-committee question is whether two compromises in two weeks, ended by a paid ransom, sits below or above the council's tolerance for a sole-vendor LMS arrangement. The answer is not the same at every institution, but the question is now on the agenda everywhere. Inside Higher Ed on the Instructure ransom payment, The Hacker News with the company quotes and the data-destruction language, and ACS Information Age with the Australian institutional read.
From Digital Attitudes: where your school is paying for the same thing twice
We built a tool that lets school IT and business managers tick the platforms they currently use, then shows where the overlap sits and how much that overlap is costing each year. The Victorian centralisation story makes the timing clean: the easiest way to prepare for a Department-managed migration is to know which of your current platforms are doing the same job twice.
Why this matters: The Victorian budget answer is a top-down consolidation. The platform-overlap tool answers the same question bottom-up, at the school level, before the migration arrives. For an SBM running through a stack audit ahead of a procurement round, this is the cheapest way to see the duplication map without booking a consultant. The platform-overlap tool on the Digital Attitudes blog.
The week's pattern is clear enough. The federal budget did not move the cyber line for schools, the states are moving it themselves, and the Canvas chapter is closing on a paid ransom that will sit in every council's risk register for the rest of 2026. More on the operational landscape at digitalattitudes.com.au.