What two areas of traditional technology can be shifted or "outsourced" to a cloud provider if done thoughtfully?

Uptime $/$ system maintenance and many aspects of the security model

All data privacy impacts and intellectual property concerns

Responsibility for all security concerns and all technology staffing considerations