You may well have heard all the buzz online about the attacks on WordPress security. Unfortunately this is no joke, and it needs to be taken very seriously, or all you've built could be hijacked or worse, lost to you.
Allow me to shoot a couple of scare tactics your way since scare tactics appear to be what drives some people to take secure your wordpress website a bit more seriously, or at least start considering the problem.
There are many ways to pull off this, and a lot involve copying and FTPing files, exporting and re-establishing databases and more. Some of them are very complicated, so it is important that you select the right one. Then you may want to look into using a plugin for WordPress backups, if you're not of the persuasion.
It's a WordPress plugin. They are drop dead easy to set up, have all the features you need for a job like this, and are relatively cheap, especially when compared to having to hire someone to get this done for you.
All-Rounder security plug-ins can be considered as a security checker that was complete. They provide you with information see page concerning the possible weaknesses of the site and check and scan the entire website.
Do your homework and some searching, but if you are pressed for time and need to get this done once and for all, try the WordPress security plugin that I use. It's a relief to know that my site (and business!) are secure.