There is a post on the MOZ blog concerning WP Security best practices that is worth the read.
The Definitive Guide to WordPress Security - MozIf you work in online marketing, the chances are good that you've worked on, are working on, or will at some point work on a WordPress site. If you work with wordpress.org in any capacity, this post is for you (much of this post doesn't apply to *.wordpress.com hosted sites).