I have been working in the cybersecurity profession for about close to 6 years now, and just last year got CISSP certification, along with the AWS Security certification recently.
As the team lead, I was meeting with a team member today to discuss their goals for this year. The team member wanted to complete the CISSP exam as a goal this year. However, he has been working in Cybersecurity for only slightly more than 1 year, and I feel this goal is overly ambitious for him at this time. Per the ISC^2 who sponsor the CISSP exam, and also my friends who work in cybersecurity, experience is critical to doing well as lots of material on the exam does not lend well to memory / just reading a book, given its very broad curriculum scope and significant focus on security governance / management. Its often not recommended to attempt the CISSP until the ~ 5 years experience range.
The other reason I am reluctant to encourage him to pursue the certification at this time is that he has expressed doubt about whether he wants to remain in the cybersecurity profession. I don't want to him to waste time in pursuing a goal that may not be helpful to growing his career. As I began my career as a security auditor, I was convinced that I absolutely wanted to become a cybersecurity professional, as I am passionate about IT Security. So in my case, this certification was well worth it, and has benefitted my career growth significantly.
If I directly tell him that pursuing CISSP certification may not be the most appropriate goal at this time, and he may want to consider waiting a few more years, I am afraid of demoralizing him and he may think I don't support him. He is an excellent team member who supports others well so I don't want to lose him or have his productivity decrease. Ordinarily, I am a pretty forward person in my communication but I am afraid it may be too painful for him.
Edit to incorporate comments: He wanted to pursue this goal because CISSP is one of the mist recognized certs in the cybersecurity profession and our profession is one in which certifications play a larger role as attestation of one's knowledge. Maybe less true for CISSP but absolutely true for hands on exam like OSCP. I can say from experience my team member is right.
How can I communicate to him that his goal may not be the most beneficial for him in a clear manner and minimize any negative fallout on this team member?