Where engineering controls are not sufficient to minimize or prevent employee exposure an employer must:
Prevent employees from working where exposure can occur
Employ a best available "technology" approach to employee protection
Use personal protective equipment instead, where feasible
In addition, use personal protective equipment to protect employees