Chancellor announces £600 million package backing British AI and security

The package of measures is built around the three themes of AI security, homegrown capability and growth in every postcode. The Chancellor believes that it sets out a distinctively British approach towards AI that defends the national interest and doesn’t leave workers behind.

On AI security, the Budget confirms £165 million for a new National AI Biosecurity Initiative (including a world-first AI Biosecurity Lab) and an additional £120 million for the AI Security Institute.

A further £60 million will fund a National Cyber Shield using agentic AI to strengthen the UK’s cyber defences, including a £25 million challenge fund for UK innovators and scoping for a regulatory sandbox. A new £70 million National Exposure and Real-Time Vulnerability Centre will use AI to identify weaknesses across critical infrastructure and the wider economy.

In order to build homegrown capability, the Sovereign AI Fund receives an additional £60 million to invest directly in promising UK AI companies, with a further £60 million for its R&D Procurement Scheme. A new UK Advanced Chip Design Academy will receive the sum of £18 million.

The package also aims to spread the benefits across the country, with £30 million for local AI partnerships, a £15 million AI Challenge Prize, an additional £23 million for the AI Economics Institute and a new National Cyber Security Centre ‘AI Cyber Security Centre of Excellence’ in Manchester.

The investment is intended to reduce the UK’s dependence on other countries, strengthen its security and resilience and support homegrown businesses and talent, while in parallel boosting the economy and speeding up public services.

Consideration of transparency 

Stuart Harvey, CEO of Datactics, commented: “Government and the private sector continue to pour huge sums into AI, but the UK relies so heavily on frontier labs despite having almost no visibility into the data their models are trained on or where that data’s stored. Labs like Anthropic and OpenAI will not open up voluntarily, so the UK should consider making transparency a condition of operating here. The Government’s biosecurity partnerships with these labs in the Budget should set that expectation.”

Harvey continued: “While the Budget’s AI package is a big boost for the UK’s AI ambitions, the reality of the situation is that most organisations are not ready to deploy AI at scale. Every week, we’re seeing major security incidents involving AI. Often, the root cause is data and access. That becomes particularly challenging as AI filters into public services such as the National Health Service, where the stakes are higher. Alongside AI investment, it’s vital that the data behind AI is held to the same standard as the AI itself and is properly governed so that sensitive data remains protected.”

Campbell Cowie (head of policy, standards and regulation at iProov, informed Security Matters: “Barely a week passes without another major cyber threat making the headlines. Strengthening Britain's defences must be viewed as a key economic priority. From critical software vulnerabilities through to attacks bringing some of the country's biggest businesses to a standstill, the cost to our economy is severe, with consequences extending far beyond the organisations targeted to include stalled growth, disrupted supply chains, undermined business confidence and jobs and investment being put at risk.”

Cowie went on to comment: “Cyber criminals use many ways to break into an organisation, but perhaps the most concerning is also one of the simplest: convincing someone they’re a trusted employee, contractor or even a third party organisation. As AI makes impersonation more convincing, cheaper and easier to scale, the ability to distinguish legitimate users from criminals is becoming a critical line of defence to protect national productivity and economic output.”

Referencing legislation, Cowie observed: “The Cyber Security and Resilience Bill presents an important opportunity to build on the Government’s commitment and strengthen protections across Critical National Infrastructure and its supply chains. Patching technical vulnerabilities is vital, but so is closing the gaps that allow criminals to exploit human trust. Even something as routine as a password reset can become a gateway for criminals to infiltrate an organisation with potentially devastating consequences that can ripple into the economy far beyond the organisation itself.”

Crossing the line

John Lucey, vice-president for the EMEA North region at Cellebrite, noted: “The investment for the AI Security Institute outlined in the Autumn Budget will help to test powerful AI models, but there’s still no clear regulation for what happens when an autonomous system crosses a line that nobody anticipated. That is the big gap in the Budget and current UK AI policy.”

Lucey added: “In highly sensitive industries such as policing and digital forensics, there’s no room for AI to make a mistake when justice and people’s lives are at stake. Forces cannot move at the same pace as frontier labs and require clear safeguards to ensure AI is accurate and only draws on evidence that it’s given without open Internet access.”

What’s more, Lucey explained: “Every output has to have a clear source and be defensible, with human oversight, if it’s to be used in court or otherwise to inform decisions on a case. As UK AI investment and regulation develop, they need to consider high-stakes applications such as policing rather than just focusing on frontier models.”

Simon Edwards, CEO of SE Labs, affirmed: “Cyber security poverty should be a priority for the Government to tackle amid a rapidly escalating cyber threat landscape. The prime issue is that SMEs lack the financial budgets to build strong cyber security capabilities, despite them being the backbone of larger organisations’ supply chains.”

According to Edwards, market-leading cyber security products are often not accessible to smaller businesses. As a result, SMEs are left to rely on alternative and somewhat less capable security tools. That scenario leaves them highly exposed to evolving cyber threats.”

“The UK cannot afford to ignore this issue,” asserted Edwards. “The Government should offer SMEs financial assistance to invest in cyber security technology. Equally, larger organisations should be incentivised to protect their suppliers and encouraged to fund the acquisition of cyber security tools designed to support the smaller businesses in their supply chain.”