Make a full back up of website including:
All web site files on the server
The database in full
Upgrade to the latest WordPress version ensuring that the site design and functionality stays intact
Repairing of anything broken in the theme if needed after upgrade
Updating of all plugins to the latest version
Secondary complete back up of web site after upgrade including:
All web site files on the server
The upgraded database in full

Complimentary tasks: addition of contact form Honeypot and Captcha (to help reduce spam) there is no way to stop it completely but these tasks help