Perform a network threat model exercise on a particularly sensitive portion of your network.
Check whether your security policy includes any mention of requiring network segmentation to protect sensitive hosts .
If you do not have network segmentation requirements, determine who you need to speak to in order to get them added.
Turn on outbound filters in your network.
Start analyzing how to deploy a firewall on your clients even on the internal network.