40.311—What are the requirements concerning SAP reports?