Know Your Business processes were largely designed around a static assumption: that risk lives at the level of the legal entity being onboarded. Regulators have moved past that assumption for years – beneficial ownership registers, UBO disclosure requirements, and FATF guidance on legal persons and arrangements all point toward the same conclusion: that corporate risk is relational, not isolated. What has been harder to establish is the scale of that relational exposure in practice.
Cedar Rose's Public Notice Intelligence Report 2026 puts a number on it. Across 58,926 companies with active bankruptcy, liquidation, or litigation flags in Cyprus, Morocco, Oman, Saudi Arabia, Tunisia, and the UAE, 89.62% have director or management connections to other entities in the dataset. That is not a niche finding confined to a handful of complex holding structures — it describes the default condition of the flagged population. For compliance teams still running KYB as a per-entity checklist, the data suggests the checklist itself needs to change.
The mechanics are straightforward. A legal event — bankruptcy, liquidation, an active court case — is recorded against a single registered entity. But the people who govern that entity rarely govern only that entity. Directors and senior managers frequently sit across multiple boards, and when one of their companies enters a formal legal event, that exposure does not stay contained to the company on the public notice. It travels with the individual to every other entity they are connected to.
Cedar Rose's linkage analysis found that 52,810 of the 58,926 flagged companies have directors or managers with connections elsewhere in the database. Oman stands out as the most extreme case: both shareholder and director linkage rates reach 97%, meaning virtually every flagged Omani entity is connected to a wider corporate network. At that density, treating any single Omani entity as an isolated risk unit is close to meaningless — the relevant unit of analysis is the network, not the node.
This is the finding that should reshape how KYB teams think about scope. A compliance officer clearing a counterparty based on a clean entity-level check may be looking at exactly the wrong unit of analysis if that entity's director also chairs three other companies, one of which is mid-liquidation.
Entity-level screening asks whether this company has a legal event on record. It is a necessary check, but it answers a narrower question than most compliance programmes assume it does. It does not ask whether the people running the company carry exposure from elsewhere, and it does not surface risk that has not yet materialised at the entity being screened but already exists one hop away in the ownership or governance structure.
This matters most in exactly the markets where Cedar Rose's data is strongest. Jurisdictions with high rates of shared directorships, nominee structures, and multi-entity holding arrangements — common features of business environments across the Middle East, North Africa, and the Eastern Mediterranean — are precisely the environments where entity-level screening underestimates true exposure most severely. A 97% linkage rate, as recorded in Oman, does not mean 97% of individual businesses are themselves distressed. It means that governance and ownership connectivity is high enough that legal-event risk at one node has a near-certain pathway to reach adjacent entities in the same network.
For financial institutions extending credit, procurement teams onboarding suppliers, and due diligence professionals assessing acquisition targets, this converts a theoretical governance concern into a practical screening gap. The counterparty that passes today's entity-level check may already be one board appointment away from a company with an active bankruptcy filing.
Closing this gap does not mean discarding entity-level checks — it means treating them as the first layer of a screening process rather than the whole process. A network-level approach adds three things entity checks cannot provide on their own:
Identifying every entity a director, manager, or beneficial owner is connected to, not just the one being onboarded, turns a single data point into a network view.
Once a network is mapped, the relevant question shifts from "does this entity have a legal event?" to "does anything in this entity's network have one?" — a materially different and more complete risk picture.
A network that is clean today can acquire exposure tomorrow if a connected entity enters a legal event. Point-in-time entity checks miss this by design; they were never built to track a network's evolving risk profile over time.
For compliance and KYB teams, the practical shift is from a linear onboarding checklist to a standing capability: the ability to see, and continue to see, the corporate network a counterparty sits inside.
The operational case is direct. Cedar Rose's report identifies the 89.62% director linkage rate as the single most operationally significant finding for KYB teams in the dataset — precisely because it demonstrates that legal-event status cannot be assessed accurately at the entity level alone. Network analysis is not an enhancement to existing KYB workflows; it is the missing layer that makes entity-level findings interpretable.
Cyprus illustrates why this matters even in jurisdictions where the headline distress signal looks moderate. With 1 in 17 registered Cypriot companies carrying an active legal distress signal, any corporate structure involving Cypriot entities carries a statistically material probability of connection to a legally distressed company. That ratio alone is a reasonable basis for compliance teams to trigger automatic network analysis whenever a Cypriot entity appears in a corporate structure — not as an exception process, but as a standing rule.
The broader implication for compliance functions is a shift in resourcing: teams that have invested primarily in entity-level verification tools now need equivalent investment in network visibility so that a clean check on the entity in front of them does not obscure exposure sitting one or two connections away.
The 89.62% director linkage rate across Cedar Rose's flagged company dataset is not a statistical footnote — it describes the operating reality of corporate risk across six MENA and Eastern Mediterranean jurisdictions. Legal-event exposure travels through people, not just through the entities whose names appear on public notices. Compliance and KYB teams that continue to screen at the entity level alone are working with an incomplete picture, and in high-linkage jurisdictions like Oman and Cyprus, that gap is large enough to be operationally significant rather than theoretical. Network-level analysis — mapping directors, shareholders, and their connected entities, then monitoring that network on an ongoing basis — is the layer that turns entity-level compliance into genuine risk visibility.