"This approach is a reasonable example of using an existing tool to identify exposures" . . . .