Here’s the slide deck from my WordCamp Maine 2016 presentation, “WordPress Security (for normal people)”:
Let me restate, emphatically, all the bullet points on Slide 3, and especially the last point: This is general advice and information, not an action plan. Security is a series of compromises, and what’s right for your site is unique. The surest way to get hacked is to plan your security solely around slides you found on the Internet. Hire professional help that is customized to your needs.