Where engineering controls are not sufficient to minimize or prevent employee exposure, an employer must:
Prevent employees from working where exposure can occur
Employ a best available "technology logy" approach to employee protection
Use personal protective equipment instead where feasible
In addition, use personal protective equipment to protect employees