Hello. I am a bit overwhelmed and seeking direction. My security review shows massive amounts of files that need permissions changed. I have searched extensively and can find no references.

1) Is there a list for correct permission on files and folders for commerce kickstart 2?
2) Is there a script that will accomplish this? Did the install give correct permissions, and the security review is full of false alarms?
3) I am aware of files needing 644 and folders 755. But why does the install 'not' have these set automatically to help make the site secure?

I can not imagine having to change so many files one by one, or even recursively by folder. Any help is mega appreciated. Thank you!