Maintenance that prevents problems.
WHAT NEEDS UPDATING
The platform itself Themes Plugins and extensions PHP version, occasionally
WHY
Out-of-date software is the leading cause of compromised websites. Attacks are automated and find known vulnerable versions quickly.
HOW OFTEN
Weekly is ideal. Monthly is the realistic minimum.
Security updates as soon as they appear.
THE PROCEDURE
Back up first Update a few items at a time Check the site after each batch Test the contact form and anything transactional
IF SOMETHING BREAKS
Restore the backup, or disable the item that caused it.
WHO DOES IT
Decide explicitly. The most common arrangement is that nobody does, because everyone assumes someone else is.
IF YOU PAY SOMEONE
Establish what is included: which updates, how often, and what happens if something breaks.
AUTOMATIC UPDATES
Worth enabling for minor and security releases. Note they depend on a working cron job, which on our servers must be a real one.