rename the admin account to something not "admin" close down permissions. stay updated on the newest versions of things. make sure you know what each plugin

rename the admin account to something not "admin" close down permissions. stay updated on the newest versions of things. make sure you know what each plugin does, and make sure it doesn't do anything naughty or insecure.