I back my blogs using a free plugin WP DB Backup up. I will restore my blog to the last settings if anything happens. I use my blog to be scanned by WP Security Scan plugin that is free and WordPress Firewall to block requests to fix wordpress malware protection.
Don't make the mistake of thinking that your hosting company will have your back as far as WordPress copies go. Not always. While they say that they do, it has been my visit this page experience that the hosting company may or may not be doing proper backups. Take that kind of chance?
Move your wp-config.php file one directory up from the WordPress root. WordPress will look for it if it can't be found in the root directory. Additionally, nobody will be able to read the document unless they have FTP or SSH access.
Another step to take to make WordPress secure is to upgrade WordPress my latest blog post to the latest version. The reason behind this is that there come fixes for old security holes which makes it essential to upgrade.
Of course it's possible to set up plugins to make your store like share buttons or automatic backup plugin. That's all. Your shop is up and running!