At minimum, setup some VLANs on the router to keep devices meant for personal use (tablets, cafe PCs, PS4s, etc), work use only machines, and critical systems s

At minimum, setup some VLANs on the router to keep devices meant for personal use (tablets, cafe PCs, PS4s, etc), work use only machines, and critical systems separate from each other.