diff --git a/it-and-security/teams/workstations.yml b/it-and-security/teams/workstations.yml
index e327ae748b..9ae9d70eb7 100644
--- a/it-and-security/teams/workstations.yml
+++ b/it-and-security/teams/workstations.yml
@@ -57,6 +57,9 @@ controls:
       - path: ../lib/macos/configuration-profiles/secure-terminal-keyboard.mobileconfig
       - path: ../lib/macos/declaration-profiles/passcode-settings.json
       - path: ../lib/macos/declaration-profiles/software-update-settings.json
+      - path: ../lib/macos/configuration-profiles/automatically-update-1Password.mobileconfig
+        labels_include_any:
+          - "Macs with 1Password8 installed"
   macos_setup:
     bootstrap_package: ""
     enable_end_user_authentication: true