Don’t set it and forget it
You may think that once your website is up and running that you can just leave it there for years. Nothing can happen to it, right? Who would want to mess with it anyway?
Unfortunately, within days of launching your website the malicious bots will be at work, trying to find vulnerabilities so that they can take advantage of your site to spread their own malware, increase search engine results for themselves, inject code into servers, send malicious emails and more.