Website security basics every site owner should know

Science and Technology Webmasters
1

Updates, strong admin passwords, two-factor sign-in, backups, HTTPS, only trusted plugins.

What else should every site owner do?