Periodically copy the content of your site and save it in the cloud or on disk. For example, once a day or a month. This process can be carried out automatically with a specified frequency. The advantage of this method is also that if the developer accidentally deleted some files, you can easily restore the data.
Most often, they save not one copy of the site, but, for example, versions for each month. If the resource weighs a lot, you can specifically rent a server for backups. We also recommend making copies before rolling out updates, updating plugins.
Backup can be done independently via hosting tools or an FTP client. There are also companies that provide backup creation services. In this case, they are responsible for the safety of the data.
It is also necessary to make backups of the database — this is done separately from FTP. And it is also advisable to check whether it is possible to restore the site from the backup. Sometimes it happens that backups are made, but there is corrupted data in them or nothing at all.
Updating the CMS site
Developers know that CMS usually searches for and finds vulnerabilities. Therefore, updates aimed at strengthening security are periodically released. Carefully read the descriptions of your CMS updates and, if they relate to protection from hacker attacks, be sure to install them. But again, don’t forget to make backups with each update.