If your organization is CMM level 5, It has some set of 
process, which needs to be followed. 
Now, audit happens internally to check if all the processes 
are followed as per the rules set/ templates, proper 
frequency. During the audit, auditor asks questions to 
verify the same. If some set of processes are not followed, 
auditor gives NC (Non Compliance) for that, which should be 
rectified within 2 weeks time.