It is possible but it is not obligatory to request a separate Sophos Central instance for each managed facility. The IT Center does not specify any requirements in this case. If you manage the infrastructure of several facilities together in other ways, it makes sense to keep all computers in one instance, for the virus scanner ae well. The advantage here is that you only need one instance and therefore only one account. The disadvantage is that you cannot delegate within one instance, i.e. if there are colleagues who should only have access to a part of the included computers/user data, this is technically not possible. You can also manage each facility in its own instance and thus achieve a clean separation. However, this will of course increase the administration effort and you will need a separate user name and e-mail address for your admin account for each instance, as an e-mail address can only be assigned to exactly one Sophos Central instance.