It provides best practices for different cybersecurity domains, such as Identify and Access Management

It provides a step-by-step cyber incident response strategy

It provides the phases of an adversary's lifecycle, the platforms they are known to attack, and the specific methods they use

It is a system that attributes attack techniques to a specific threat actor