Which of the following is the GREATEST potential exposure created by outsourcing to an application service provider?