Security measures for a basic WordPress site

Hi, I run a WordPress site for a local club/society. It comprises pages and posts but it doesn’t have any interactive features, ie. comments are not allowed and there are no forms to submit questions.

Would you say that a really strong admin password is enough to protect the site from hackers or would you recommend additional security plugins as well?

Thanks Pete