Developing an Original Ethical Framework for Offensive Cybersecurity Operations in Nigerian Law Enforcement Contexts

Nigerian law enforcement agencies increasingly conduct offensive cybersecurity operations including network exploitation, honey traps, and monitoring to investigate and disrupt cybercrime, yet the ethical framework governing these activities is underdeveloped, creating risks of abuse and human rights violations. This study developed an original Ethical Framework for Offensive Cybersecurity Operations in Nigerian Law Enforcement Contexts, drawing on cybersecurity ethics theory, Nigerian constitutional law, and comparative law enforcement surveillance frameworks. A theory-building methodology was employed: systematic review of cybersecurity law enforcement ethics literature (54 publications from 2018 to 2024), legal analysis of Nigerian constitutional protections, the Cybercrime Act 2015, Evidence Act 2011, and EFCC Act provisions governing covert cyber operations, structured interviews with 20 EFCC investigators, prosecutors, judges, human rights lawyers, and cybersecurity ethics scholars, and expert validation. Legal analysis identified four key ethical-legal tensions: proportionality of network exploitation relative to offence severity, privacy rights of third parties affected by targeted surveillance, admissibility standards for evidence from offensive operations, and legal immunity protections for law enforcement cyber operators. The original OECO-Nigeria Framework proposes five ethical principles: lawfulness (explicit statutory authority), necessity (minimum necessary intrusion), proportionality (commensurate with offence severity), transparency (documented authorisation), and accountability (independent review of offensive operations). Implementation guidance for EFCC and NPF operational contexts is provided. Expert review by 18 ethics, law, and cybersecurity specialists confirmed the framework's theoretical and legal originality.

Keywords: offensive cybersecurity operations, law enforcement ethics, EFCC, Nigeria, surveillance framework