Under the Control of Substances Hazardous to Health Regulations 2002 (COSHH), what is the employer's primary duty regarding hazardous substances?