A backup is only useful if it restores. Here is a simple routine for WordPress backups that you have actually tested, so a bad update or hack is an inconvenience, not a disaster.
Most WordPress sites are not hacked by clever attackers. They are hacked by bots looking for weak passwords and outdated plugins. These basics close those doors.
Most WordPress problems are maintenance problems in disguise. Here is a weekly, monthly and quarterly routine that keeps a small business site fast, secure and working.