Summary of WordPress Security Practices
I found this article on the Imunify360 blog well worth the time.
Link: Securing a Linux Server
This article gives key elements. I also recommend using additional AV software, especially if you are hosting WordPress or other CMS accounts. Imunify360 is a good option.