When I was in college, one of my business instructors told us students that one of the greatest hurdles to making money was procrastination.
I back up my blogs frequently using a plugin WP DB Backup. I can restore my blog to the last 13, if anything happens. I use WP Security Scan plugin to scan my blog and WordPress Firewall to block requests to fix malware problem.
Also, don't make the mistake of thinking that your hosting company will have your back as far as WordPress backups go. Not always. It has been my experience that the hosting company may or might not be doing proper backups, while they say they do. Why take that kind of chance?
Should you ever want to migrate your website elsewhere, such as a new web YOURURL.com host, you'd be able to pull this off without a hitch, and also without needing to disturb your old site until the new one was in place and ready to roll.
Now we're getting into things specific to WordPress. You must rename it to config.php and modify the document config-sample.php, when you install WordPress. You will need to set up the database facts there.
Utilizing a plugin for WordPress security makes great sense. Backups need to be carried out on a regular go to this site basis. Do not become a victim as a result of not being proactive about your site!