Where this fits
Google’s Cloud Adoption Framework (CAF) assesses your organization across four themes — Learn, Lead, Scale, and Secure — and rates each at one of three maturity phases: Tactical, Strategic, or Transformational. The Learn theme measures the quality and scale of your people-and-skills program: how well your technical teams keep up with Google Cloud, and how effectively you lean on Google and its partner ecosystem to close gaps. In Google’s own definition, Learn captures “the quality and scale of your learning programs” and “the extent to which you augment internal staff with experienced partners.” It is deliberately the first theme in the alphabet because skills are the constraint that throttles every other theme: you cannot Lead, Scale, or Secure on a platform your people do not understand. This article is part 2 of the series and goes deep on the four levers that move you from Tactical to Transformational on Learn — learning-program quality and scale, working with partners, upskilling and certification, and establishing a Cloud Center of Excellence (CCoE).

Sub-component 1: The quality and scale of learning programs
What it is. This is the breadth (how many people), depth (how rigorous), and durability (how repeatable) of your skilling effort. Google’s maturity model draws a sharp line between ad hoc learning — engineers Googling errors and watching random YouTube videos when a project demands it — and a managed, role-based curriculum that every relevant employee progresses through on a known cadence. Tactical organizations train reactively and per-project; Transformational organizations run learning as a continuously funded program with defined learning paths, internal champions, and measured outcomes.
Why it matters. Skills gaps are the single most common reason cloud programs stall after the first few workloads. A team that “lifted-and-shifted” three VMs onto Compute Engine but never learned IAM, VPC Service Controls, or Cloud Logging will plateau — and will quietly accumulate risk and cost. Scaling adoption means scaling competence at the same rate, which only a program (not heroics) can do.
How to do it well. Treat learning as a product with a backlog, owners, and a roadmap, not an HR line item. The mechanics that distinguish a high-quality program:
- Role-based learning paths. Map each persona (cloud engineer, data engineer, SRE/platform, security, developer, network, FinOps, leadership) to a concrete path rather than a generic “intro to GCP” for everyone.
- Blended modalities. Combine self-paced video, hands-on labs, instructor-led training (ILT), and real project work. Skills that are never used in anger evaporate within weeks.
- Hands-on by default. GCP’s killer learning asset is Google Cloud Skills Boost (the platform formerly branded Qwiklabs), which spins up real, temporary GCP projects with live credentials so learners operate against the actual console and
gcloud, not a simulator. Skill Badges validate hands-on competency in a domain. - Sandbox for safe practice. Give learners a dedicated sandbox folder in your resource hierarchy with guardrails (budgets, Organization Policy constraints, auto-cleanup) so they can experiment without touching production or blowing the bill.
- Measurement. Track completion, badge/cert attainment, and the lagging indicator that actually matters — time-to-productivity on real workloads.
GCP tools, artifacts, and decisions.
| Need | GCP asset / tool | Notes |
|---|---|---|
| Self-paced + hands-on labs | Google Cloud Skills Boost | Real sandboxed GCP projects; learning paths, courses, Skill Badges |
| Curated role tracks | Skills Boost Learning Paths | e.g. Cloud Engineer, Data Engineer, Cloud Architect, Security |
| Instructor-led depth | Authorized Training via Google Cloud Learning Partners | Deep multi-day courses, often delivered by partners |
| Org-wide assignment & reporting | Skills Boost for Business / subscriptions | Assign paths, track completion across teams |
| Safe practice environment | Sandbox folder + Organization Policy + budgets | Guardrailed experimentation space |
| Internal sharing | Internal “GCP Guild” wiki, brown-bags, recorded demos | Captures tribal knowledge as it forms |
Key decisions to make and write down: who owns the curriculum, what cadence (e.g. every engineer completes their path within 90 days of joining a cloud team), what budget (Skills Boost subscription seats + ILT days), and what counts as “done” (badge, certification, or a shipped workload).
Sub-component 2: Working with partners
What it is. This is the degree to which you deliberately augment internal staff with experienced external help — and, crucially, structure that engagement so capability transfers in rather than creating permanent dependency. Google’s CAF explicitly rewards mature use of partners; the goal of a Transformational organization is not “no partners” but partners used surgically to accelerate and teach.
Why it matters. Early in an adoption you have a chicken-and-egg problem: you need to ship cloud workloads to build skills, but you need skills to ship cloud workloads. Partners break that deadlock. They also de-risk specialized, infrequent work (landing zone design, large migrations, ML platform builds) that does not justify a permanent in-house team. The failure mode the framework warns against is using partners as staff augmentation forever — your people never learn, and the partner becomes a single point of failure.
How to do it well.
- Pick the right partner type for the work. Google’s ecosystem distinguishes broadly between Services Partners (who deliver consulting, migration, and managed services) and Technology/ISV Partners (whose software runs on or extends GCP). Within services, look for relevant Partner Specializations and Expertises — Google’s badges that certify a partner has proven, audited capability in a domain (e.g. Infrastructure, Data & Analytics, Cloud Migration, Machine Learning, Security). A Premier partner tier signals scale and depth.
- Use Google’s own delivery arm where it fits. Google Cloud Consulting (formerly Professional Services Organization, PSO) and Customer Engineering can lead the most critical foundational work and proactive design reviews.
- Engage the right programs. PSO/Consulting for hands-on build; Customer Career Programs / training credits; and incentive programs such as RAMP / Migration programs that can fund partner-led assessments and migrations.
- Contract for knowledge transfer. Make pairing, documentation, runbooks, and a defined exit/handover an explicit deliverable — not an afterthought. “Build with us, not for us.”
Partner-fit decision aid.
| Situation | Recommended approach |
|---|---|
| First landing zone / org foundation | Google Cloud Consulting or a Premier Infrastructure-specialized partner, with your platform team embedded |
| Large-scale migration of 100s of VMs/apps | Migration-specialized partner + Migration Center + funding via Google migration programs |
| Niche, one-off (e.g. SAP on GCP, anthos/GKE Enterprise) | Specialized partner with that exact Expertise |
| Steady-state run of a workload you want to own | In-house, with short partner advisory only |
| Capability you intend to keep forever | Hire/train internally; use partner only to bootstrap and teach |
Artifacts: a partner engagement model (RACI), statements of work with explicit knowledge-transfer deliverables and exit criteria, a partner scorecard, and a “skills we are keeping vs. outsourcing” decision register.
Sub-component 3: Upskilling and certification
What it is. The formal validation layer on top of learning — turning “we did some training” into a measurable, externally-recognized credential plan with role-specific certification targets and a funded path to reach them.
Why it matters. Certifications are not vanity. They (a) give you an objective, hire-able and benchmarkable signal of competence; (b) force genuine depth, because the role-based exams are notoriously practical; © are often required to unlock partner status and Google incentives (partner specializations require a threshold number of certified individuals); and (d) materially improve retention and morale when paired with a clear growth ladder. The CAF treats a deliberate certification strategy as a hallmark of Strategic-and-above maturity.
How to do it well. Map personas to the right certificate, set targets, fund the attempts, and protect study time. Google’s certification portfolio (as of 2026) breaks into Foundational, Associate, and Professional tiers:
| Certification | Tier | Primary persona it validates |
|---|---|---|
| Cloud Digital Leader | Foundational | Business stakeholders, leadership, sales |
| Associate Cloud Engineer | Associate | Cloud/infra engineers deploying & operating workloads |
| Associate Google Workspace Administrator | Associate | Workspace/collaboration admins |
| Associate Data Practitioner | Associate | Entry-level data analysts/engineers |
| Professional Cloud Architect | Professional | Architects designing GCP solutions |
| Professional Cloud Engineer pathway / Cloud Network Engineer | Professional | Network engineers (VPC, hybrid, Cloud Interconnect) |
| Professional Cloud Developer | Professional | App developers building cloud-native services |
| Professional Cloud DevOps Engineer | Professional | SRE / platform / CI-CD owners |
| Professional Data Engineer | Professional | Data pipeline & analytics engineers (BigQuery, Dataflow) |
| Professional Cloud Database Engineer | Professional | Database specialists (Cloud SQL, Spanner, AlloyDB) |
| Professional Cloud Security Engineer | Professional | Security engineers (IAM, VPC-SC, Security Command Center) |
| Professional Machine Learning Engineer | Professional | ML/AI engineers (Vertex AI) |
| Professional Google Workspace Administrator | Professional | Senior Workspace administrators |
Practical mechanics that work:
- Anchor to learning paths. Each Professional cert has a matching Skills Boost learning path; pair every cert target with the path and the relevant Skill Badges as milestones.
- Use cohorts, not lone wolves. Run study cohorts with a deadline; group accountability roughly doubles pass rates versus solo study.
- Fund it fully. Pay for the exam, a re-sit, and study hours during work time. The cost of a failed attempt is trivial next to the cost of an engineer who never certifies.
- Tie to a ladder. Make certifications a visible (if not mandatory) rung in your engineering progression so the effort pays the individual back.
- Track the partner threshold. If your org is a partner (or aspires to be), monitor your certified-headcount against the specialization requirement.
KPIs for this sub-component.
| KPI | Tactical | Strategic | Transformational |
|---|---|---|---|
| % of cloud team with a relevant Professional cert | < 15% | 40–60% | > 75% |
| Time from hire to first cert | unmanaged | ~6 months | < 90 days |
| Certs mapped to a funded learning path | none | most roles | every role |
| Re-cert / currency tracked | no | partial | yes, automated reminders |
Artifacts: a certification matrix (persona → target cert → path → deadline), a budget line for exams and vouchers, a tracking dashboard, and an internal recognition mechanism (badges on Slack/profiles, spot bonuses).
Sub-component 4: Establishing a Cloud Center of Excellence
What it is. A Cloud Center of Excellence (CCoE) is the small, cross-functional team that owns the cloud operating model: it sets standards, builds reusable platform assets, curates the learning program, governs guardrails, and acts as the internal consultancy that the rest of the organization pulls from. In a mature org it is the institutional home of everything in the Learn theme — and the connective tissue to Lead, Scale, and Secure. It is the difference between cloud capability living in a few people’s heads and living in the organization.
Why it matters. Without a CCoE, every team reinvents landing zones, re-debates IAM patterns, and re-learns the same lessons — adoption fragments and risk compounds. The CCoE concentrates scarce expertise, sets paved roads so product teams move fast safely, and is the accountable owner for the maturity ratings the CAF measures. It is the single most leverage-rich artifact of the Learn theme.
How to do it well.
- Staff it cross-functionally and keep it small. A starting CCoE is typically 4–8 people: a lead/architect, a platform/infra engineer, a security engineer, a FinOps/cost lead, a networking specialist, and an enablement/learning owner. Pull, don’t push — rotate engineers from product teams through it so knowledge diffuses back out.
- Give it a real charter. Define mandate, scope, decision rights (what it mandates vs. recommends), funding, and success metrics in writing. Ambiguity here is the most common cause of a CCoE being ignored.
- Operate the “paved road,” not the gate. The CCoE’s product is reusable, opinionated platform assets that make the secure/compliant path the easy path. On GCP this means:
| CCoE responsibility | GCP mechanism / asset |
|---|---|
| Landing zone & org foundation | Cloud Foundation Toolkit, Terraform Google modules, Fabric FAST, Cloud Setup checklist |
| Resource hierarchy & isolation | Organization → Folders → Projects, project factory patterns |
| Guardrails & policy-as-code | Organization Policy Service, IAM (custom roles, least privilege), VPC Service Controls |
| Standardized networking | Shared VPC, hub-and-spoke, Cloud Interconnect patterns |
| Cost governance / FinOps | Billing accounts, Budgets & alerts, BigQuery billing export, FinOps hub |
| Observability standards | Cloud Logging, Cloud Monitoring, log sinks, dashboards as code |
| Security posture | Security Command Center, org-level findings, baseline detections |
| Curated enablement | Owns the Skills Boost subscription, learning paths, and certification matrix |
| Reusable building blocks | Internal module registry / Service Catalog, golden Terraform |
- Publish a backlog and intake. Treat internal teams as customers: a request intake, a roadmap, and SLAs for design reviews. The CCoE should be a magnet, not a bottleneck.
- Measure it. Track adoption of paved-road assets (what % of new projects use the project factory), lead time for a compliant new environment, and the number of teams self-sufficient on GCP.
Artifacts: the CCoE charter, an operating model / RACI, a published platform/paved-road catalog (Terraform modules, golden landing zone), an intake-and-roadmap, governance standards (IAM, Org Policy, tagging/labeling), and the owned enablement plan.
Real-world enterprise scenario
Company: Meridian Mutual, a 14,000-employee insurer headquartered in Pune with a ~600-person technology org. Their estate is mostly on-prem VMware plus a sprawl of three teams who each independently spun up GCP projects for analytics. A CAF self-assessment rated them Tactical on Learn: training was per-project, only 9 engineers held any Google Cloud certification, two consulting firms were embedded as long-term staff-aug with no exit plan, and there was no central platform. The CTO sponsors a 9-month push to reach Strategic on Learn before a major BigQuery-and-Vertex-AI claims-analytics program kicks off.
Decisions per sub-component:
-
Learning programs at scale. Meridian buys 250 Google Cloud Skills Boost subscription seats and defines six role-based learning paths (Platform/SRE, Data Engineering, Security, App Dev, Network, Leadership). Every cloud-touching engineer is assigned a path with a 90-day completion target; Skill Badges are the milestones. A guardrailed sandbox folder is created with a ₹40,000/month budget cap per engineer enforced via Budgets & alerts and locked-down Organization Policy constraints so people can practice against live GCP safely. A fortnightly “GCP Guild” brown-bag captures patterns as they emerge.
-
Working with partners. They terminate the open-ended staff-aug arrangement and re-engage one Premier partner with Data & Analytics and Infrastructure Specializations under a fixed-scope SOW to build the landing zone with an embedded 4-person Meridian platform squad — knowledge transfer, runbooks, and a hard handover at month 5 are explicit deliverables. Google Cloud Consulting runs a two-day design review of the landing zone and the Vertex AI platform plan. A migration of the analytics workloads uses Migration Center for assessment, partly funded through a Google migration program.
-
Upskilling and certification. A certification matrix targets: all 16 platform/SRE engineers to Associate Cloud Engineer then Professional Cloud DevOps Engineer; 12 data engineers to Professional Data Engineer; 5 security engineers to Professional Cloud Security Engineer; 6 architects to Professional Cloud Architect; and Cloud Digital Leader for 30 managers and the leadership team. Exams, one free re-sit, and four hours/week of study time are fully funded. Engineers study in deadline-driven cohorts.
-
Cloud Center of Excellence. A 7-person CCoE is stood up with a written charter giving it mandate over the resource hierarchy, IAM baseline, Org Policy, and the billing/labeling standard, and advisory status on application architecture. It ships a paved-road catalog built on the Cloud Foundation Toolkit and Terraform Google modules: a project factory, Shared VPC pattern, baseline Security Command Center posture, Cloud Logging sinks, and BigQuery billing export dashboards. It owns the Skills Boost subscription and the certification matrix, and runs a weekly intake for design reviews.
Measurable outcome (month 9). Certified engineers go from 9 to 41 (52% of the cloud team holding a relevant Professional cert); time-from-hire-to-first-cert drops to ~75 days; 83% of new GCP projects are provisioned through the CCoE’s project factory rather than by hand; the claims-analytics platform launches on schedule on BigQuery + Vertex AI; and the next CAF assessment rates Meridian Strategic on Learn (with the CCoE and the funded certification program cited as the decisive evidence).
Deliverables & checklist
Common pitfalls
- Treating learning as one-and-done training, not a funded program. A two-week bootcamp at kickoff with no ongoing cadence decays fast. Fix: run learning as a product with an owner, a backlog, and a recurring budget — paths assigned on a known cadence.
- Using partners as permanent staff-augmentation. The CAF explicitly penalizes dependency. If your partner leaves and the lights go out, you failed the Learn theme. Fix: contract knowledge transfer, pairing, and a hard exit as deliverables; keep an in-house squad embedded in every partner build.
- Certifications without protected study time or sandbox practice. Telling engineers to “go get certified” on top of a full sprint load yields low pass rates and resentment. Fix: fund exams and protect 3–4 hours/week, run cohorts, and give hands-on sandbox access via Skills Boost.
- A CCoE with no charter or decision rights. A “center of excellence” that can only suggest becomes a wiki nobody reads. Fix: write the charter, define what it mandates vs. advises, fund it, and give it the org-policy and landing-zone ownership to be a paved road.
- A CCoE that becomes a bottleneck (the gate, not the road). If every project must queue behind the CCoE for manual approval, adoption stalls and shadow IT returns. Fix: ship self-service paved-road assets (project factory, golden Terraform) so the compliant path is the fast path; measure paved-road adoption %.
- Skilling without measurement. Counting “courses completed” while ignoring whether teams can actually ship and operate workloads. Fix: track lagging indicators — time-to-productivity, paved-road adoption, and certs that map to shipped workloads.
What’s next
Part 3 of “Google Cloud Adoption Framework” moves to the Lead theme — how executive sponsorship, the cross-functional cloud team, and a motivated workforce turn the skills you built here into organizational momentum.