If parts of your database were to disappear, how viable would your website or business be ? Let us look at what you will need to do to execute secure your wordpress site cloning, and how it can help your overall WordPress security .
Strong passwords - Do what you can to use a password, alpha-numeric, with upper and lower case and special characters. Easy to remember passwords are also easy to guess!
Yes, you need to do regular original site backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. Definitely more if you make additions get more and changes to your site. If you have a community of people that are in there all the time, or make changes multiple times every day, a daily backup should be a minimum.
Install the WordPress Firewall Plugin. This plugin investigates web requests to identify and stop attacks.
Do not use wp_. Most web hosting linked here providers are removing that default but if yours doesn't, adjust wp_ to anything but that.