Questions on VLANs for introduced security equipment

So my company is introducing some changes to our network that requires some planning but I'm not sure of best practices... we'll be adding card access to doors, IP cameras, time clocks, etc... I'm curious on the following:

Should each device/group of devices have their own VLAN? Should the VLANs be outside of the production network (172/20)?

Thanks in advance.