Best practices FAQ?

Hi,

Recently I had my wordpress database deleted, probably by someone who was able to hack in. I was able to recover the database without too much lost, but I was wondering if there is an FAQ somewhere regarding Best Practices for a new installation, e.g., 1) file permissions and security recommendations, 2) plugins to avoid because they may create security holes, 3) spam containment, etc.

Thanks for any advice,

Rich