It's also important to change admin username and your password if someone needs your admin and password username to login to perform the job and will help you with your blog. Admin username and your password changes, after all the work is finished. Someone in their company might not be if the person is trustworthy. Better to be safe than sorry!
The secure your wordpress site Codex has an outline of what permissions are okay. File and directory permissions can be changed through an FTP client or within the page from your web host.
Don't depend on your Web host - Many people depend on their web host to"do all that technical stuff for me", not realizing that sometimesthey don't! Far better to have the responsibility lie with you, instead of out of your control.
Recently, the blog of Reuters was murdered by an unknown hacker and posted a fake news article. Their reputation is ruined because of what the hacker did since Reuters is a popular news site. In the event you do not pay attention on the safety of your WordPress 20, Something similar sites may happen to you.
Whitelists phrases and black based on which area they appear within. (unknown/numeric parameters vs. known post bodies, comment bodies, etc.).
Just ensure which you can schedule, and you choose a plugin that's up to date with the current version and release of WordPress, restore and replicate.