New UK university governance code requires financial stress tests and three-year board reviews

The 2026 framework also puts student interests, academic risk, board culture, and independent challenge at the center of institutional oversight.

The Committee of University Chairs' 2026 code places student interests, financial resilience, and academic oversight within university board responsibilities.

The Committee of University Chairs (CUC) has published its 2026 Code of Higher Education Governance, setting minimum expectations for financial stress testing, academic risk oversight, board composition, conduct, and independent performance reviews at institutions in England, Wales, and Northern Ireland.

The principles-based code operates on an apply-or-explain basis. Institutions must follow provisions marked "must" to claim compliance, while boards choosing a different approach to provisions marked "should" must publish a clear and specific explanation.

The framework applies across universities and other higher education institutions with different legal structures, missions, and operating models. It does not apply in Scotland, where institutions follow the Scottish Code for Good Higher Education Governance.

The code states that obligations to students should remain central to governance decisions, while boards must also consider financial sustainability, academic quality, research risks, technological change, regulation, and institutional culture.

More than 30 organizations were represented on the steering committee that developed the code. CUC said 300 people contributed through workshops and working groups, while 100 stakeholders submitted written evidence.

Boards are expected to use the framework for ongoing self-assessment rather than treat it as a compliance checklist. Each institution must complete an annual board assessment, commission an independent external review every three years, and publish an annual development action plan.

Financial resilience and risk move higher up the board agenda

University boards must scrutinize institutional income, cash flow, balance sheets, estate liabilities, pension exposure, borrowing, and capital programs under the new framework.

The code requires stress testing and scenario analysis against a range of plausible adverse conditions. Boards must also ensure that contingency plans are credible, actionable, and implemented where necessary.

Financial projections and investment decisions should be tested against assumptions covering student recruitment, research funding, operating costs, borrowing, and capital investment.

Boards must determine and regularly review their institution's risk appetite, approve a risk management and internal control framework, and devote sufficient time to risks affecting short-, medium-, and long-term sustainability.

Major strategic, financial, or academic proposals should include their principal assumptions, risks, mitigations, and alternative options, including severe but plausible downside scenarios.

The code also expects boards to test the financial impact of major operational changes and understand the full cost of material institutional activities.

Russell Group Chief Executive Professor Libby Hackett said in a LinkedIn post: "Russell Group universities are typically large, complex organisations with wide-ranging activities, stakeholders and funding sources, alongside an array of regulatory and reporting responsibilities.

"As with all large organisations, they are also responding to an increasingly volatile external environment, domestic and global, and with increasing financial pressure. Under these circumstances, it is more important than ever to prioritise robust, transparent and effective governance that takes account of each institution’s own context as well as external factors."

Student interests and academic risks receive explicit focus

The code gives university boards ultimate responsibility for effective academic governance, including teaching, research, knowledge exchange, academic standards, and student matters.

Boards must receive a clear account of their institution's academic strategy and quality framework, including how academic risks are identified, monitored, and governed.

They must also understand how their institution's board interacts with academic governance structures. The code says this should extend beyond the passive receipt of reports and include opportunities to engage with academic boards, academic staff, and students.

Institutions must have policies protecting academic freedom and lawful freedom of expression, with boards receiving assurance on how those policies operate and the risks involved.

Where universities conduct research or enter research partnerships, boards should oversee research quality, ethics, geopolitical risk, misconduct, external codes, and funder requirements.

Boards should also oversee the risks attached to teaching partnerships and transnational education, including due diligence, financial performance, academic standards, monitoring, and exit arrangements.

The code requires boards to understand their stakeholders and seek meaningful engagement with them. It specifies that the presence of student or staff board members does not replace wider engagement with those groups.

All board members should receive training that allows them to scrutinize academic governance and institutional risks, even where they do not have an academic background.

Board conduct, composition, and performance face closer scrutiny

The code requires a majority of independent board members, including the Chair.

Non-executive members must be appointed for terms of no more than four years, with total service normally limited to nine years. Extensions should not be automatic and should follow an assessment of the member's independence, skills, experience, character, and performance.

Boards must regularly review their size, composition, skills, and diversity against institutional strategy and risk. They should also ensure that academic scrutiny does not depend on a single independent member.

The code introduces a defined role for a Senior Independent Board Member, who should be available to other members and hold the Chair to account where conduct or performance does not meet the institution's needs.

Boards must publish a register of interests covering members and executives, manage actual or perceived conflicts, and maintain independent whistleblowing and complaints procedures.

Institutions should establish Audit, Nominations, Remuneration, and Finance Committees, or equivalent bodies, while retaining collective board responsibility for delegated decisions.

Each board member must receive structured induction and ongoing development. The Chair should review individual performance annually, while the Chair's own conduct and performance should be assessed by the Senior Independent Board Member or another independent member.

Hackett said: "The Committee of University Chairs’ new Code of Governance provides an important impetus for universities of all shapes and sizes to reflect critically on their governance arrangements and culture, and ensure they are following best practice. We will work closely with the CUC and with our universities as they engage with the new Code to strengthen and secure their own governance processes."

The 2026 code now provides the framework for institutions' annual board assessments and their next three-year independent reviews. CUC said it will review and refresh the framework periodically as governance practice, regulation, and expectations change.