For a typical mid-market site, 5-8 business days. Larger sites scale roughly linearly.
The checklist is the framework. Doing it yourself works if you have the technical fluency; agencies bring execution velocity and benchmarking.
Whichever is most broken on your site. Run all four and prioritize by impact × effort.
Full audit annually, layer-specific spot checks quarterly.