Security best practices.
- Keep up with the latest WordPress version updates.
- Be sure you use a strong password, and not the same password you use on other sites.
- Scan your site regularly. Do not allow comments to be posted without some oversight. Do not allow guests to post or upload images or files without your knowledge.
- Make and archive ongoing site backups (see BackupBuddy for a professional approach, http://pluginbuddy.com/purchase/backupbuddy/)
- Have your ISP block all non-US traffic on your server if you are a local/regional business (may require an advance web host package).
Related