Need advise on network and files security

I have a small business client that has an XP machine where they house the data (word, pdf, etc and ACT database). They have RV042 router and mix of XP pro and home machines.

I need to help them set up secure VPN and file access, but where they would know who accessed which files and restrict the access to some files.

Any ideas?