Lots of different methods. But the big thing is this. 

Isolation is key. Many Different devices/accounts for different functions etc