If a Dq Treat Participating Location requests a configuration change contrary to established security policies, what must Acumera receive before honoring the request?
Dq_Treat Franchise · 2025 FDDAnswer from 2025 FDD Document
Acumera establishes firewall configuration and policy based on PCI-DSS recommendations, generally accepted industry best practices and in consultation with Dairy Queen.
Participating Location acknowledges that:
17.1. Once Dairy Queen and Acumera have established security configurations and policies for the Dairy Queen system, Acumera will not honor Participating Location requests to configure Equipment in ways that are contrary to those established configurations and policies unless and until Acumera receives a Configuration Exception from Dairy Queen.
17.2. "Configuration Exception" shall mean a written exception to a configuration policy from Dairy Queen, describing the Participating Location and the requested exception in sufficient detail to allow Acumera to fulfill the request.
17.3. Dairy Queen has agreed to respond to the request for a Configuration Exception within 2 business days.
17.4. Participating Locations may request information on Dairy Queen's established security configurations and policies from Dairy Queen.
17.5. Acumera may honor such approved Participating Location requests to configure the firewall and/or network in ways that may be contrary to Acumera's or PCI-DSS recommendations or may not adhere to generally accepted data security best practices and acknowledges that Acumera has no liability for any issues that may arise due to the fulfilment of these requests.
Source: Item 17 — The following paragraph is added to the end of Item 17 of the Disclosure Document: (FDD pages 70–378)
What This Means (2025 FDD)
According to the 2025 Dq Treat FDD, Acumera establishes firewall configurations and policies based on PCI-DSS recommendations, industry best practices, and in consultation with Dairy Queen. If a Dq Treat Participating Location requests a configuration change that goes against these established security measures, Acumera requires a "Configuration Exception" from Dairy Queen before honoring the request.
A "Configuration Exception," as defined in the FDD, is a written exception to the configuration policy issued by Dairy Queen. This exception must specifically describe the Participating Location and the requested exception in enough detail for Acumera to fulfill the request. Dairy Queen has agreed to respond to these requests within two business days.
This policy ensures that while franchisees can request changes, all modifications to established security protocols are first vetted and approved by Dairy Queen. This protects the overall security and integrity of the Dq Treat system. However, the FDD also states that Acumera may honor approved requests, even if they contradict Acumera's or PCI-DSS recommendations, and Acumera bears no liability for issues arising from fulfilling these requests. This shifts the responsibility for any negative consequences resulting from the configuration change to the Participating Location.