A private cloud poses few fresh problems, but going to a public cloud has three major risk factors for a firm