When I was in college, one of my company instructors told us students that one of the biggest hurdles to making money was procrastination.
I back my blogs using a plugin WP DB Backup up. I will always restore my website if anything happens. I use my site to be scanned by WP Security Scan plugin that is free regularly and WordPress Firewall to block asks to fix hacked wordpress database.
Protect your login credentials - Don't keep your login credentials where they might be found by a hacker. Store them offsite, and even offline. Roboform is good for protecting them. Food for thought!
I don't think there is a person out there that after learning how much of a problem WordPress hacking is that it's a good idea. However, something I've noticed over the discover here years is that when it comes to securing their blogs, bloggers seem to be stuck in this state that is reactive.
You can also make a firewall that blocks hackers from infiltrating your own blogs. The firewall prevents the hacker from coming into your files. You must also have updated version of Apache. Upgrade your PHP as well. It's important that your system is always full of upgrades.
Do your homework and see here some hunting, but if you're pressed for time and want to get this done once and for all, try the WordPress safety plugin that I use. It's a relief to know that my site (and company!) are secure.