This checklist should get you 80% there to full CIS compliance, as these are by far the most critical things that need to be checked on your Mac.