Malpass International has been reliant on a legacy human resource management database for the past 12 years. Now, senior management has approved funds for a complete replacement. The CIO is considering three options: creating a cloud-based database, contracting for a vendor to host the database, or housing the database in the company's guarded Palo Alto, CA headquarters. As Director of Information Security, summarize the unique security challenges each of these alternatives poses?