Your site should be backed up regularly. Be sure that both the database and files are being backed up. There are plugins that directly back up to AWS’s S3 service.
It is vital that the WordPress core and plugins get updated frequently to prevent vulnerabilities to malicious attacks. Updating WordPress and plugins should be done cautiously. Only update during non-peak times after having completed a full backup. Updating or installing plugins or WordPress can cause compatibility issues, breaking core parts of the site.