Another good bit of advice - keep your software up to date.
I deal with a lot of WordPress blogs and some of them don't auto-update. I keep telling the owners: "Make sure you process all the updates. Here's how to do it..." Every six months I have to go in and fix the viruses and hacks that have come in becuase the plugins weren't updated.