Keep headers/logos under 125 pixels high. It takes up valuable viewing space, especially for laptop users, that is best left for the good stuff to appear"above the fold." Take a cue from the big companies, simple logos done well say it all. This is our #1 pet peeve - screaming logos and headers!
Cloning your website is another degree in repair hacked wordpress site that may be very useful. Cloning simply means that you have backed up your website to a totally different place, (offline, as in a folder, in order to not have SEO issues ) where you can get it at a moment's notice if the need arises.
The one I recommend, and the approach, is to use one of the password creation and storage plugins available for your browser. I believe after a trial period, you need to pay for it, although Lots of people like RoboForm. I use the free version of Lastpass, and I recommend it for those who use Firefox or Internet Explorer. That will generate passwords for you.
Keep your WordPress Setup to date - One of the easiest and most valuable tasks you can do yourself is to ensure that your WordPress installation is updated. WordPress gives a notice in your dashboard to you, so there's really no reason.
Security plug-ins can be thought of as a security checker. They provide you with information about the weaknesses of the site and scan and check the site.
There are always going to be risks being online (or even just being alive!) And it's easy to get caught up in the panic. We often put try this out the breaks on, As soon as we get caught up in the panic. This isn't a reaction. Take some common sense precautions forge ahead. If something bad does happen, it is going to need to be addressed then and no amount of quaking in your will have helped. If nothing does, all is good and you haven't made yourself ill with worry.