The Commission may, upon application of any interested party, grant an exemption from the requirements of this part. Exemptions will be granted only if they are authorized by law and will not constitute an undue risk to the common defense and security. Documentation related to the request, notification and processing of an exemption shall be maintained for three years beyond the period covered by the exemption.