An information processing system includes a first apparatus, a second apparatus, and a management apparatus, in which the first apparatus includes a unit that notifies the management apparatus of a first state of the first apparatus regarding information security requirements, the second apparatus includes a unit that notifies the management apparatus of a second state of the second apparatus regarding the information security requirements, and the management apparatus includes an issue unit that issues transmission permission for transmission of an encrypted document from the first apparatus to the second apparatus related to a request for transmission permission in a case where both of a first state sent from the first apparatus which is the transmission source and a second state sent from the second apparatus which is the transmission destination satisfy the information security requirements in response to the request for transmission permission from the first apparatus.