What is considered a 'Cybersecurity Incident' affecting Buff City Soap?

According to Buff City Soap's 2025 Franchise Disclosure Document, a Cybersecurity Incident is defined as any event that results in unauthorized access to, or negatively impacts the availability or integrity of, the System, Buff City Soap makeries, or Confidential Information. This definition is important for prospective franchisees to understand because it outlines the scope of events that Buff City Soap considers to be a security breach.

Notably, the definition specifies that a Cybersecurity Incident is one that could not have been prevented by commercially reasonable administrative, physical, or technical security measures. This suggests that Buff City Soap expects franchisees to implement and maintain a certain level of security to protect their systems and data. If an incident occurs that could have been prevented with such measures, the franchisee may be held responsible.

For a prospective Buff City Soap franchisee, this definition highlights the importance of investing in robust cybersecurity measures and staying up-to-date with the latest security best practices. It also underscores the need to understand what constitutes Confidential Information, as any breach involving such information would be classified as a Cybersecurity Incident. Franchisees should discuss with Buff City Soap what specific security measures are expected and what support the franchisor provides in preventing and responding to such incidents.