If your organization is CMM level 5, It has some set of process, which needs to be followed. Now, audit happens internally to check if all the processes

are followed as per the rules set/ templates, proper frequency. During the audit, auditor asks questions to verify the same. If some set of processes are not followed, auditor gives NC (Non Compliance) for that, which should be rectified within 2 weeks time.