A security team wants some of its services to be hosted on the Internet instead of local devices however they also need to maintain physical control over certain confidential data what type of SIEM solutions should they select ?