Writing a CIS hardening script for RHEL7 based on the latest benchmark

Hi I already have a script written in bash script. 1. Do you require assessment and remediation of failed items or only assessment 2. Do you need to check the entire CIS benchmark controls or only specific items I hope you have gone through the number of controls in the CIS. Thanks

Dear, I had 13 servers to apply the CIS configuration on, so I created a script to configure each server already.