This is my simple and secure method of operation:
* no wallets on any Windows machine, strictly Linux!
* Linux partitions are encrypted using LUKS - if a hacker aquires my hard drive physically he can suck it.
* wallets are compiled from github repositories. It's very easy to do, for most coins it's "qmake-qt4 && qmake" once you have the dependencies installed, if you don't know what that means at all you should first get some basic linux knowledge, install whatever is easiest to learn (I guess Ubuntu) and play with that a while.
* a small (5MB) TrueCrypt (google that) encrypted container is created for wallet.dat file backups, all wallet.dat files are encrypted using local coin "Encrypt wallet" feature, password is randomly generated and stored in KeePassX, KeePassX database is stored on the same TrueCrypt container. Master KeePassX password in my head. TrueCrypt container password in my head.
* backup wallet.dat for a coin to TrueCrypt after creating a new receiving address. Close (unmount) TrueCrypt when not using, never keep it open. The 5MB crypt file is then copied to an USB flash hidden in the house, also copied to Dropbox. Dropbox can't determine incremental changes for TrueCrypt volumes so you have to have a small file (hence the 5MB) for container because it's sync'ed full after every modification.
* 2FA on all services, instantly withdraw to personal wallet what you're not trading.
That's about it.
Sounds easy for someone who knows how to use Linux. Myself I have no clue how to use Linux and although I know my way round windows, this just sounds like Chinese to me, whit all those commands that you need to know..