I back up my blogs using a plugin WP DB Backup. If anything happens I can restore my website to the settings. I use WP Security Scan free plugin to scan my blog and WordPress Firewall to block requests to fix wordpress malware protection.
No software system is immune to bugs and vulnerabilities. Security holes will be discovered and men will do their best to exploit them. Keeping your software up-to-date is a good way because software vendors will fix their products once security holes are found.
Fortunately, keeping your WordPress website up-to-date is one of the simplest things you can do. For the last few versions, WordPress has included the ability to set up automatic updates. A new upgrade becomes available.
Another step to take to make WordPress secure is to always upgrade WordPress. The main reason for this is that with each new update there come fixes for older security holes which makes it essential to update.
I prefer using a WordPress plugin to get the work done. Make sure that the plugin you select is in a position to do select site link backups, has restore and can clone. Also be sure that it is often updated to keep pace. There's absolutely not any use in backing your data up and not working.