Hardening WordPress means making changes to a default installation to make it harder for hackers to gain access. If you did not have your new website hardened, you can/should still do it now.
Keeping your WordPress core code and plugins up to date is one of the best ways to keep your website secure. If you have many plugins installed, you could be getting notifications almost daily of updates needed. Ignoring this can put your site at risk.
Regular code and database backups are a must for everything in the digital world. Your business website is available 24/7. If it would get corrupted and you would need to rebuild your website, how will that effect your company? This is an easy maintenance task but often ignored.