Periodically keep checking your Hosting directory for malware and viruses. Otherwise, Google display embarrassing ‘message warning of the threat.’ Always update your software to block vulnerabilities in the software. If your Hosting provider is using config server, ask them for security checklist of your account. Acute hosting providers always keep latest server software PHP, Apache, MySQL, and OS. Security systems like brute-force detection system, Web Application Firewall (WAF) are available to monitor and analyze traffic and stop fraudulent attempts to intrude the system.
Evaluate the backup policy offered by Hosting provider, most of the shared hosting provider’s although take backups periodically but expect website owners to use the control panel to make backups by themselves.