An article from Wordfence suggesting to ask your hosting company the following questions. I think the questions are valid for both Linux and Windows hosting company.
- Are you running up-to-date softwares?
- Are you completely isolating hosting accounts from each other? Or is it possible for one hosting account to read files in another account on the same server?
- Are my server logs available and how long are they kept?
- How are you backing up my site and how long are backups being retained?
- Does my current hosting plan allow me to enable HTTPS?