This blog is only going to be a part of a site... Yes, this is a side component of a big site

Owners will manage their own blogs, just needs to be set up
I think custom is too complex now.
Blogs are necessary, because people like to interact... Leave comments, get in touch with a more dynamical side of the site...
I need some free software.
Oh, well, I think I'll go AGAIN WORDPRESS!

Only that I think I should take more care of that security issue.
How to protect WordPress blogs from potential attacks? There are hackers who "scan" the internet with software (i heard) and then attack WordPress accounts one by one. I had several such incidents with clients.
One client had her whole site destroyed.
I am looking now for a safer way to back up, even keep malicious software away...
So how to protect WordPress?