Cybersecurity and Information Management in Digital Libraries: Emerging Challenges for Nigerian Academic Institutions

Abstract

The progressive digitisation of library services in Nigerian academic institutions has created unprecedented opportunities for knowledge access while simultaneously exposing institutional information systems to an expanding and increasingly sophisticated landscape of cybersecurity threats. This study examines cybersecurity and information management in digital libraries of Nigerian universities, with a specific focus on the emerging challenges, policy frameworks, institutional responses, and prospects for sustainable security governance. Drawing on a systematic review of peer-reviewed scholarship, policy documents, and institutional assessments published between 2019 and 2025, the study evaluates the strengths and weaknesses of current cybersecurity practices and information management strategies in Nigerian academic libraries; assesses the adequacy of the national policy environment, including the Cybercrimes (Prohibition, Prevention, etc.) Act of 2015 (as amended in 2024), the Nigeria Data Protection Act (NDPA) of 2023, and relevant NITDA guidelines; and identifies the structural, institutional, and human capital factors that shape cybersecurity outcomes. Findings indicate that Nigerian academic libraries face a complex threat matrix encompassing computer viruses, hacking, and unauthorised access to information resources, phishing, ransomware, insider threats, and social engineering attacks. These threats are compounded by structural vulnerabilities such as inadequate funding, erratic electricity supply, insufficient ICT infrastructure, an acute shortage of trained cybersecurity personnel, and the absence of institution-specific cybersecurity policies in most universities. While the national policy framework has been progressively strengthened, culminating in the comprehensive NDPA of 2023 and the amendment of the Cybercrimes Act in February 2024, its translation into effective institutional practice in academic library settings has been slow and uneven. The study is anchored in four theoretical frameworks; the Confidentiality, Integrity, and Availability (CIA) Triad Model, Information Security Management Systems (ISMS) theory, Routine Activity theory, and the Socio Technical Systems Theory. Seven substantive policy recommendations are advanced for strengthening cybersecurity governance and information management in Nigerian academic digital libraries.