I back my blogs frequently using a plugin WP DB Backup up. If anything happens I will restore my website. I use my blog to be scanned by WP Security Scan plugin that is free frequently and WordPress Firewall to block requests that are discover here suspicious-looking to fix hacked wordpress database.
Safeguard your login credentials - Do not keep your login credentials where they might be found by a hacker. Store them offsite, and even offline. Roboform is for protecting them very good . Food for thought!
Yes, you want to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More, if possible. Definitely, if you make additions official site and changes to your website. If you make changes multiple times a day, or have a community of people that are in there all the time, a daily backup should be a minimum.
Upgrade, if you're not running the latest version of WordPress. Similar to keeping your door unlocked when you leave for vacation leaving your site is.
Free software: If you have installed scripts such as Wordpress, search Google for'wordpress security'. You'll next get many tips.