It's also important to change your password and admin username if you are helped by someone with your blog and needs admin username and your password to login to do the job. After all of the work is complete, IMMEDIATELY change your password and admin username. Someone in their company may not be even if the man is trustworthy. Better to be safe than sorry!
Besides text and the graphics you're creating, you're going to need a backup and protection alternative for your new site. fix malware problem is important, and if you don't protect and back up your website you can lose data and information which may be very tough to restore. You don't need to have to start over from scratch once you've done all that work, so be sure you're secure.
There are many ways to pull this off, and many involve re-establishing databases and much more and FTPing files, exporting and copying. Some of these are very complicated, so it's imperative that you go for the one that is right. Then you might want to check into using a plugin for WordPress backups if you are not of the persuasion that is technical.
Yes, you need to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. Definitely more, if you make changes and regular great post to read additions to your site. If you make changes multiple times a day, or have a community of people which are in there all the time, a backup should be a minimum.
Another step to take to make WordPress more secure is to always upgrade WordPress. The main reason behind this is that there come fixes for security holes making it essential to update.
Oh . And incidentally, I talked about plugins. Make sure it's a secure one, when you get a new plugin. Don't install any plugin because the owner is saying that plugin can allow you to do that or this. Use get a software engineer to examine it, or maybe a test blog to look at the plugin. This way you'll know it is not a threat for you or your business.