Cloning your site is just another level in how to fix hacked wordpress site which may be very useful. Cloning simply means that you've backed up your site to a totally different place, (offline, as in a folder, in order to not have SEO problems) where you can access it in a moment's notice if the need arises.
Also, don't make the mistake of believing that your hosting company will have your back so far as WordPress copies go. Not always. It has been my experience that the hosting company may or may not be doing proper backups while they say they do. Take that kind of chance?
Yes, you want to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More. If you make changes and additions to your site, definitely more. If you have a community of people which are in there all the time, or make changes multiple times every day, a daily backup should be a minimum.
Make a note of your new password! I recommend the free or paid version of the software *Roboform* to remember your passwords.
There are always going to be risks being online (or even just being alive!) Also it's easy to get caught up in the panic. We often put the breaks on, As soon as we get caught up in the fear. This websites isn't a response that is good. Take some common sense precautions forge ahead. It is going to need to be dealt with then, if click something does happen and of quaking in your boots 23, no amount will have helped. If nothing does, all is good and you haven't made yourself ill.