The best security that anyone can do for his wp website is having a good wordpress backup system.
One thing that security plugins are not going to protect you, is when your web host is attacked.
Therefore, you should frequently backup your WordPress site.
Infrequent backups make your site lose a lot of data in case you have to recover it after a hack. I suggest backing up your site at least weekly or even daily in case you have a news website.