One link that covers the most what author needs: https://developer.wordpress.org/themes/theme-security/