What is a Configuration Exception in the context of Dq Treat's network configuration?
Dq_Treat Franchise · 2025 FDDAnswer from 2025 FDD Document
17.2. "Configuration Exception" shall mean a written exception to a configuration policy from Dairy Queen, describing the Participating Location and the requested exception in sufficient detail to allow Acumera to fulfill the request.
17.3. Dairy Queen has agreed to respond to the request for a Configuration Exception within 2 business days.
17.5. Acumera may honor such approved Participating Location requests to configure the firewall and/or network in ways that may be contrary to Acumera's or PCI-DSS recommendations or may not adhere to generally accepted data security best practices and acknowledges that Acumera has no liability for any issues that may arise due to the fulfilment of these requests.
17.7. Acumera will not entertain requests from Participating Locations to allow non-CDE network traffic within the CDE, unless and until Participating Location receives a Configuration Exception from Dairy Queen and provides it to Acumera.
17.8. Acumera does not recommend opening firewall ports to allow traffic or access for non-business related needs, including, by example, the use of insecure remote access tools , and Acumera will not carry out any request by a Participating Location to do so, unless and until Participating Location receives a Configuration Exception from Dairy Queen and provides it to Acumera.
Source: Item 17 — The following paragraph is added to the end of Item 17 of the Disclosure Document: (FDD pages 70–378)
What This Means (2025 FDD)
According to the 2025 Dq Treat FDD, a "Configuration Exception" is a specific, written authorization from Dairy Queen that allows Acumera to deviate from the standard security configurations and policies established for the Dq Treat system. This exception must detail the specific location and the requested deviation with enough clarity for Acumera to implement it.
For a Dq Treat franchisee, this means that if they need a network configuration that doesn't align with the standard security protocols, they must first obtain a written Configuration Exception from Dairy Queen. Dq Treat has agreed to respond to these requests within two business days. Without this exception, Acumera, the company responsible for managing the firewall, will not make the requested changes.
It's important to note that Acumera is willing to honor approved Configuration Exception requests, even if they contradict Acumera's own recommendations, PCI-DSS standards, or general data security best practices. However, Acumera bears no liability for any issues arising from fulfilling these requests. This places the responsibility and risk associated with non-standard configurations squarely on the Dq Treat franchisee. Furthermore, Acumera will not allow non-CDE network traffic within the CDE unless a Configuration Exception from Dairy Queen is provided. Similarly, Acumera will not open firewall ports for non-business related needs without a Configuration Exception from Dq Treat.