@prefix schema: <https://schema.org/> .
@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix ks: <https://comcomponent.com/vocab/> .

<https://comcomponent.com/blog/bitlocker-practical-guide/#article>
    schema:about <https://comcomponent.com/knowledge/bitlocker/>, <https://comcomponent.com/knowledge/recovery-key/> ;
    schema:mentions <https://comcomponent.com/knowledge/device-encryption/>, <https://comcomponent.com/knowledge/tpm/>, <https://comcomponent.com/knowledge/uefi-secure-boot/>, <https://comcomponent.com/knowledge/recovery-mode/>, <https://comcomponent.com/knowledge/entra-id/>, <https://comcomponent.com/knowledge/active-directory/>, <https://comcomponent.com/knowledge/microsoft-account/>, <https://comcomponent.com/knowledge/group-policy/>, <https://comcomponent.com/knowledge/intune/>, <https://comcomponent.com/knowledge/xts-aes/>, <https://comcomponent.com/knowledge/firmware-update/>, <https://comcomponent.com/knowledge/device-loss-data-leak/> .

<https://comcomponent.com/knowledge/bitlocker/> a skos:Concept ;
    skos:prefLabel "BitLocker"@ja ;
    skos:definition "ドライブ全体を暗号化して紛失・盗難・不適切な廃棄によるデータ流出を防ぐWindowsの機能。"@ja ;
    skos:altLabel "BitLockerドライブ暗号化"@ja ;
    ks:uses <https://comcomponent.com/knowledge/xts-aes/> ;
    ks:prevents <https://comcomponent.com/knowledge/device-loss-data-leak/> ;
    ks:configuredBy <https://comcomponent.com/knowledge/group-policy/> ;
    ks:configuredBy <https://comcomponent.com/knowledge/intune/> ;
    ks:verifiedBy <https://comcomponent.com/knowledge/manage-bde/> ;
    ks:requires <https://comcomponent.com/knowledge/pro-edition/> .

<https://comcomponent.com/knowledge/recovery-key/> a skos:Concept ;
    skos:prefLabel "回復キー(回復パスワード)"@ja ;
    skos:definition "BitLockerの通常の解錠ができないときにドライブを解錠する48桁の数字。"@ja ;
    skos:altLabel "BitLocker回復キー"@ja ;
    skos:altLabel "48桁の回復パスワード"@ja ;
    ks:verifiedBy <https://comcomponent.com/knowledge/recovery-key-id/> ;
    ks:verifiedBy <https://comcomponent.com/knowledge/manage-bde/> .

<https://comcomponent.com/knowledge/tpm/> a skos:Concept ;
    skos:prefLabel "TPM"@ja ;
    skos:definition "暗号鍵を外部に出さずに保護し、起動環境の改ざん検証を担うセキュリティモジュール。"@ja ;
    skos:altLabel "Trusted Platform Module" ;
    skos:altLabel "セキュリティチップ"@ja .

<https://comcomponent.com/knowledge/xts-aes/> a skos:Concept ;
    skos:prefLabel "XTS-AES"@ja ;
    skos:definition "BitLockerが既定で使うブロック暗号の動作モード。"@ja ;
    skos:altLabel "XTS-AES 128" .

<https://comcomponent.com/knowledge/device-loss-data-leak/> a skos:Concept ;
    skos:prefLabel "紛失・盗難によるデータ流出"@ja ;
    skos:definition "PCやディスクの紛失・盗難・不適切な廃棄によって保存データが第三者に読まれること。"@ja ;
    skos:altLabel "情報漏えい(紛失・盗難)"@ja .

<https://comcomponent.com/knowledge/device-encryption/> a skos:Concept ;
    skos:prefLabel "デバイスの暗号化"@ja ;
    skos:definition "要件を満たすPCでBitLockerによる暗号化を自動的に初期化する簡易機能。"@ja ;
    skos:altLabel "Device Encryption" ;
    skos:altLabel "自動デバイス暗号化"@ja ;
    skos:broader <https://comcomponent.com/knowledge/bitlocker/> ;
    ks:automates <https://comcomponent.com/knowledge/bitlocker/> ;
    ks:requires <https://comcomponent.com/knowledge/tpm/> ;
    ks:requires <https://comcomponent.com/knowledge/uefi-secure-boot/> ;
    ks:uses <https://comcomponent.com/knowledge/clear-key/> ;
    ks:verifiedBy <https://comcomponent.com/knowledge/msinfo32/> .

<https://comcomponent.com/knowledge/uefi-secure-boot/> a skos:Concept ;
    skos:prefLabel "UEFIセキュアブート"@ja ;
    skos:definition "署名検証に通ったブートコンポーネントだけを起動させるUEFIの仕組み。"@ja ;
    skos:altLabel "セキュアブート"@ja ;
    skos:altLabel "Secure Boot" .

<https://comcomponent.com/knowledge/entra-id/> a skos:Concept ;
    skos:prefLabel "Microsoft Entra ID"@ja ;
    skos:definition "Microsoftのクラウド型ID・アクセス管理基盤。"@ja ;
    skos:altLabel "Entra ID" ;
    skos:altLabel "Azure AD" ;
    skos:altLabel "Azure Active Directory" .

<https://comcomponent.com/knowledge/active-directory/> a skos:Concept ;
    skos:prefLabel "Active Directory(AD DS)"@ja ;
    skos:definition "オンプレミスのWindowsドメインを構成するディレクトリサービス。"@ja ;
    skos:altLabel "AD DS" ;
    skos:altLabel "Active Directory Domain Services" ;
    skos:altLabel "オンプレAD"@ja .

<https://comcomponent.com/knowledge/microsoft-account/> a skos:Concept ;
    skos:prefLabel "Microsoftアカウント"@ja ;
    skos:definition "個人向けサービスにサインインするためのMicrosoftのアカウント。"@ja ;
    skos:altLabel "MSアカウント"@ja .

<https://comcomponent.com/knowledge/recovery-mode/> a skos:Concept ;
    skos:prefLabel "BitLocker回復モード"@ja ;
    skos:definition "起動環境の変化などで通常の解錠ができず、回復キーの入力を求められる状態。"@ja ;
    skos:altLabel "回復画面"@ja ;
    ks:requires <https://comcomponent.com/knowledge/recovery-key/> .

<https://comcomponent.com/knowledge/firmware-update/> a skos:Concept ;
    skos:prefLabel "ファームウェア更新"@ja ;
    skos:definition "PCのBIOS/UEFIファームウェアを更新する作業。"@ja ;
    skos:altLabel "BIOS更新"@ja ;
    skos:altLabel "UEFI更新"@ja .

<https://comcomponent.com/knowledge/group-policy/> a skos:Concept ;
    skos:prefLabel "グループポリシー"@ja ;
    skos:definition "Active Directoryドメイン環境でWindowsの設定を集中構成する仕組み。"@ja ;
    skos:altLabel "GPO" ;
    skos:altLabel "Group Policy" .

<https://comcomponent.com/knowledge/intune/> a skos:Concept ;
    skos:prefLabel "Microsoft Intune"@ja ;
    skos:definition "クラウドからPC・モバイルデバイスを管理するMicrosoftのMDMサービス。"@ja ;
    skos:altLabel "Intune" .

<https://comcomponent.com/knowledge/bitlocker-pin/> a skos:Concept ;
    skos:prefLabel "起動時PIN(TPM+PIN)"@ja ;
    skos:definition "TPMに加えて起動時にPINの入力を必須にする、BitLockerの多要素構成。"@ja ;
    skos:altLabel "TPM+PIN" ;
    ks:incompatibleWith <https://comcomponent.com/knowledge/unattended-pc/> .

<https://comcomponent.com/knowledge/startup-key/> a skos:Concept ;
    skos:prefLabel "スタートアップキー"@ja ;
    skos:definition "USBメモリに保存した鍵ファイルで起動時の認証を行うBitLockerの方式。TPMのないPCでも利用できる。"@ja ;
    skos:altLabel "Startup Key" .

<https://comcomponent.com/knowledge/bitlocker-suspend/> a skos:Concept ;
    skos:prefLabel "保護の一時停止(サスペンド)"@ja ;
    skos:definition "暗号化を保ったままBitLockerの保護を一時的に無効化する操作。既定では再起動で自動再開する。"@ja ;
    skos:altLabel "Suspend-BitLocker" ;
    ks:shouldPrecede <https://comcomponent.com/knowledge/firmware-update/> .

<https://comcomponent.com/knowledge/key-backup-policy/> a skos:Concept ;
    skos:prefLabel "回復情報のバックアップ必須ポリシー"@ja ;
    skos:definition "回復情報の保存に成功するまでBitLockerの有効化を許可しないポリシー。"@ja ;
    skos:altLabel "回復情報がAD DSに保存されるまでBitLockerを有効にしない"@ja ;
    ks:prevents <https://comcomponent.com/knowledge/recovery-key-loss/> ;
    ks:configuredBy <https://comcomponent.com/knowledge/group-policy/> ;
    ks:shouldPrecede <https://comcomponent.com/knowledge/bitlocker/> .

<https://comcomponent.com/knowledge/recovery-key-loss/> a skos:Concept ;
    skos:prefLabel "回復キー不在によるデータ喪失"@ja ;
    skos:definition "回復手段の控えがないまま回復モードに入り、暗号化されたデータを取り出せなくなること。"@ja .

<https://comcomponent.com/knowledge/manage-bde/> a skos:Concept ;
    skos:prefLabel "manage-bde"@ja ;
    skos:definition "BitLockerの状態確認・プロテクター管理を行うコマンドラインツール。"@ja .

<https://comcomponent.com/knowledge/pro-edition/> a skos:Concept ;
    skos:prefLabel "Windows Pro/Enterprise系エディション"@ja ;
    skos:definition "Pro・Pro Education・Enterprise・Educationなど、管理機能を持つWindowsのエディション群。"@ja ;
    skos:altLabel "Pro" ;
    skos:altLabel "Enterprise" ;
    skos:altLabel "Education" .

<https://comcomponent.com/knowledge/home-edition/> a skos:Concept ;
    skos:prefLabel "Windows Homeエディション"@ja ;
    skos:definition "個人向けのWindowsエディション。管理系機能の多くが対象外。"@ja ;
    skos:altLabel "Home" ;
    ks:uses <https://comcomponent.com/knowledge/device-encryption/> .

<https://comcomponent.com/knowledge/clear-key/> a skos:Concept ;
    skos:prefLabel "クリアキー"@ja ;
    skos:definition "保護なしの一時鍵。OOBE完了時点の暗号化はこの鍵で行われ、回復キーのバックアップ成功後に除去される。"@ja ;
    skos:altLabel "Clear Key" .

<https://comcomponent.com/knowledge/local-account/> a skos:Concept ;
    skos:prefLabel "ローカルアカウント"@ja ;
    skos:definition "MicrosoftアカウントやEntra IDに紐づかない、PC内で完結するアカウント。"@ja .

<https://comcomponent.com/knowledge/unprotected-encryption/> a skos:Concept ;
    skos:prefLabel "保護されない暗号化状態"@ja ;
    skos:definition "暗号化はされているが保護が有効化(アーム)されておらず、盗難時の保護にならない状態。"@ja .

<https://comcomponent.com/knowledge/hardware-replacement/> a skos:Concept ;
    skos:prefLabel "ハードウェア交換"@ja ;
    skos:definition "マザーボード交換やドライブの別PCへの移設など、起動環境が変わるハードウェアの変更。"@ja ;
    skos:altLabel "マザーボード交換"@ja ;
    skos:altLabel "ドライブ移設"@ja .

<https://comcomponent.com/knowledge/printed-copy/> a skos:Concept ;
    skos:prefLabel "印刷・ファイルの控え"@ja ;
    skos:definition "紙への印刷やUSBメモリ・ファイルとして手動保存した回復キーの控え。"@ja ;
    skos:altLabel "回復キーの控え"@ja .

<https://comcomponent.com/knowledge/used-space-only/> a skos:Concept ;
    skos:prefLabel "使用済み領域のみ暗号化"@ja ;
    skos:definition "データのある領域だけを暗号化して初回の所要時間を短縮する範囲指定。新品ドライブ向け。"@ja ;
    skos:altLabel "Used Space Only" .

<https://comcomponent.com/knowledge/repair-maintenance/> a skos:Concept ;
    skos:prefLabel "修理・保守作業"@ja ;
    skos:definition "PCを修理業者や保守要員に預けて作業してもらうこと。"@ja ;
    skos:altLabel "修理"@ja .

<https://comcomponent.com/knowledge/recovery-key-exposure/> a skos:Concept ;
    skos:prefLabel "回復キーの漏えい"@ja ;
    skos:definition "回復キーが第三者に知られ、ドライブの全データにアクセスされ得る状態。"@ja .

<https://comcomponent.com/knowledge/key-rotation/> a skos:Concept ;
    skos:prefLabel "回復パスワードの再発行(ローテーション)"@ja ;
    skos:definition "新しい回復パスワードを発行してバックアップ成功を確認したうえで、使用・開示されたものを無効化する運用。"@ja ;
    skos:altLabel "回復キーの使い捨て"@ja ;
    ks:mitigates <https://comcomponent.com/knowledge/recovery-key-exposure/> ;
    ks:recommendedFor <https://comcomponent.com/knowledge/recovery-key-exposure/> .

<https://comcomponent.com/knowledge/pc-disposal/> a skos:Concept ;
    skos:prefLabel "PC廃棄"@ja ;
    skos:definition "PCやディスクを廃棄・売却・リサイクルに出すこと。"@ja ;
    skos:altLabel "廃棄・リサイクル"@ja ;
    ks:requires <https://comcomponent.com/knowledge/data-erasure/> .

<https://comcomponent.com/knowledge/data-erasure/> a skos:Concept ;
    skos:prefLabel "データ消去手順"@ja ;
    skos:definition "初期化(リセット)・専用消去ツール・物理破壊など、検証可能な形でデータを消す手順。"@ja ;
    skos:altLabel "初期化・消去ツール・物理破壊"@ja ;
    ks:prevents <https://comcomponent.com/knowledge/device-loss-data-leak/> .

<https://comcomponent.com/knowledge/encryption-overhead/> a skos:Concept ;
    skos:prefLabel "暗号化の性能影響"@ja ;
    skos:definition "ドライブ暗号化によるI/O性能への影響。現代のPCでは体感に響くことはまれ。"@ja .

<https://comcomponent.com/knowledge/msinfo32/> a skos:Concept ;
    skos:prefLabel "msinfo32(システム情報)"@ja ;
    skos:definition "デバイスの暗号化の前提条件を満たしているかを「デバイスの暗号化のサポート」行で確認できるツール。"@ja ;
    skos:altLabel "システム情報"@ja .

<https://comcomponent.com/knowledge/password-protector/> a skos:Concept ;
    skos:prefLabel "パスワード方式"@ja ;
    skos:definition "起動時にパスワードを入力するBitLockerの認証方式。ロックアウトの仕組みがなく総当たりに弱い。"@ja ;
    skos:altLabel "パスワードプロテクター"@ja ;
    ks:notRecommendedFor <https://comcomponent.com/knowledge/bitlocker/> .

<https://comcomponent.com/knowledge/personal-account-storage/> a skos:Concept ;
    skos:prefLabel "担当者個人アカウントでの回復キー保管"@ja ;
    skos:definition "会社PCの回復キーが担当者個人のMicrosoftアカウントにだけ保存されている状態。"@ja .

<https://comcomponent.com/knowledge/recovery-key-id/> a skos:Concept ;
    skos:prefLabel "回復キーID"@ja ;
    skos:definition "回復パスワードごとの識別子。回復画面に表示される先頭8桁を、保存済みキーと照合する手がかりにする。"@ja ;
    skos:altLabel "キー識別子"@ja .

<https://comcomponent.com/knowledge/cipher-choice/> a skos:Concept ;
    skos:prefLabel "暗号化方式の選定"@ja ;
    skos:definition "XTS-AESの128/256ビットなど暗号化方式を決めること。後から変えるには復号と再暗号化が必要。"@ja ;
    ks:shouldPrecede <https://comcomponent.com/knowledge/bitlocker/> .

<https://comcomponent.com/knowledge/unattended-pc/> a skos:Concept ;
    skos:prefLabel "無人運転の装置PC"@ja ;
    skos:definition "人手を介さず再起動・稼働し続ける必要がある装置制御・キオスク用途のPC。"@ja ;
    skos:altLabel "装置PC"@ja ;
    skos:altLabel "キオスクPC"@ja .

<https://comcomponent.com/knowledge/encrypted-master-image/> a skos:Concept ;
    skos:prefLabel "保護有効化済みイメージの複製"@ja ;
    skos:definition "BitLockerの保護を有効化した状態の親機イメージを複製すること。回復パスワードはデバイス固有のため複製してはならない。"@ja ;
    ks:notRecommendedFor <https://comcomponent.com/knowledge/clone-deployment/> .

<https://comcomponent.com/knowledge/clone-deployment/> a skos:Concept ;
    skos:prefLabel "クローン展開"@ja ;
    skos:definition "親機のディスクイメージを複製して複数PCへ展開するキッティング方式。"@ja ;
    skos:altLabel "イメージ展開"@ja .

<https://comcomponent.com/knowledge/dpapi/> a skos:Concept ;
    skos:prefLabel "DPAPI"@ja ;
    skos:definition "実行中のマシン上でアプリの秘密情報を保護するWindowsのデータ保護API。"@ja ;
    skos:altLabel "データ保護API"@ja ;
    ks:recommendedFor <https://comcomponent.com/knowledge/app-secrets/> .

<https://comcomponent.com/knowledge/app-secrets/> a skos:Concept ;
    skos:prefLabel "アプリの秘密情報"@ja ;
    skos:definition "業務アプリが扱う接続文字列・APIキーなどの秘密情報。ログオン済みマシンではドライブ暗号化では守れない。"@ja ;
    skos:altLabel "接続文字列"@ja ;
    skos:altLabel "APIキー"@ja .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:uses ;
    rdf:object <https://comcomponent.com/knowledge/tpm/> ;
    schema:description "TPM搭載PCの既定構成では暗号化キーの保護にTPMを使い、起動環境の検証に通ったときだけキーを解放する(TPMのないPCではスタートアップキー方式を使う)"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:uses ;
    rdf:object <https://comcomponent.com/knowledge/xts-aes/> ;
    schema:description "既定の暗号化方式はXTS-AES 128ビット"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/configure> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:prevents ;
    rdf:object <https://comcomponent.com/knowledge/device-loss-data-leak/> ;
    schema:description "ディスクを抜いて別PCへつなぐ攻撃や不適切な廃棄でもデータを読めなくする"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/device-encryption/> ;
    rdf:predicate ks:automates ;
    rdf:object <https://comcomponent.com/knowledge/bitlocker/> ;
    schema:description "要件を満たすPCでOOBE完了時に暗号化を自動で初期化する"@ja ;
    ks:evidence <https://learn.microsoft.com/windows-hardware/design/device-experiences/oem-bitlocker> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/device-encryption/> ;
    rdf:predicate ks:requires ;
    rdf:object <https://comcomponent.com/knowledge/tpm/> ;
    schema:description "TPM(1.2または2.0)の搭載が条件"@ja ;
    ks:evidence <https://learn.microsoft.com/windows-hardware/design/device-experiences/oem-bitlocker> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/device-encryption/> ;
    rdf:predicate ks:requires ;
    rdf:object <https://comcomponent.com/knowledge/uefi-secure-boot/> ;
    schema:description "UEFIセキュアブートが有効であることが条件"@ja ;
    ks:evidence <https://learn.microsoft.com/windows-hardware/design/device-experiences/oem-bitlocker> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/recovery-key/> ;
    rdf:predicate ks:storedIn ;
    rdf:object <https://comcomponent.com/knowledge/entra-id/> ;
    schema:description "Entra ID参加PCではEntra IDへ自動バックアップされる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/recovery-key/> ;
    rdf:predicate ks:storedIn ;
    rdf:object <https://comcomponent.com/knowledge/active-directory/> ;
    schema:description "回復ポリシー構成済みのドメイン参加PCではAD DSへバックアップされる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/recovery-key/> ;
    rdf:predicate ks:storedIn ;
    rdf:object <https://comcomponent.com/knowledge/microsoft-account/> ;
    schema:description "個人利用ではMicrosoftアカウントに保存され aka.ms/myrecoverykey で確認できる"@ja ;
    ks:evidence <https://support.microsoft.com/windows/find-your-bitlocker-recovery-key-6b71ad27-0b89-ea08-f143-056f5ab347d6> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/recovery-mode/> ;
    rdf:predicate ks:requires ;
    rdf:object <https://comcomponent.com/knowledge/recovery-key/> ;
    schema:description "回復モードからの復帰には48桁の回復パスワード等の回復手段が必要"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/firmware-update/> ;
    rdf:predicate ks:mayCause ;
    rdf:object <https://comcomponent.com/knowledge/recovery-mode/> ;
    schema:description "起動環境の測定値が変わるため、計画作業前の一時停止(サスペンド)が定石"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:configuredBy ;
    rdf:object <https://comcomponent.com/knowledge/group-policy/> ;
    schema:description "回復方法や暗号化方式などをGPOで構成できる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/configure> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:configuredBy ;
    rdf:object <https://comcomponent.com/knowledge/intune/> ;
    schema:description "BitLocker CSP経由でIntuneから構成できる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/configure> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:uses ;
    rdf:object <https://comcomponent.com/knowledge/bitlocker-pin/> ;
    schema:description "据え置きの高セキュリティ端末向けに、起動時のPIN入力を必須にする多要素構成を選べる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:uses ;
    rdf:object <https://comcomponent.com/knowledge/startup-key/> ;
    schema:description "TPMのないPCでもスタートアップキー方式でOSドライブを暗号化できる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker-suspend/> ;
    rdf:predicate ks:prevents ;
    rdf:object <https://comcomponent.com/knowledge/recovery-mode/> ;
    schema:description "ファームウェア更新などの計画作業前に保護を一時停止すれば、回復キーを要求されずに作業できる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/key-backup-policy/> ;
    rdf:predicate ks:prevents ;
    rdf:object <https://comcomponent.com/knowledge/recovery-key-loss/> ;
    schema:description "バックアップ成功まで有効化させないことで、回復手段のない暗号化ボリュームの発生を防ぐ"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/configure> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/key-backup-policy/> ;
    rdf:predicate ks:configuredBy ;
    rdf:object <https://comcomponent.com/knowledge/group-policy/> ;
    schema:description "「回復情報が保存されるまでBitLockerを有効にしない」をGPOで構成する"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/configure> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/recovery-mode/> ;
    rdf:predicate ks:mayCause ;
    rdf:object <https://comcomponent.com/knowledge/recovery-key-loss/> ;
    schema:description "回復キーがどこにも保存されていない状態で回復モードに入ると、初期化(全データ消失)しかなくなる"@ja ;
    ks:evidence <https://support.microsoft.com/windows/find-your-bitlocker-recovery-key-6b71ad27-0b89-ea08-f143-056f5ab347d6> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:verifiedBy ;
    rdf:object <https://comcomponent.com/knowledge/manage-bde/> ;
    schema:description "manage-bde -status / -protectors -get で暗号化状態と回復キーを確認できる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/operations-guide> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:requires ;
    rdf:object <https://comcomponent.com/knowledge/pro-edition/> ;
    schema:description "手動での有効化や管理機能を含むフル機能のBitLockerはPro/Enterprise系エディションが対象"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/home-edition/> ;
    rdf:predicate ks:uses ;
    rdf:object <https://comcomponent.com/knowledge/device-encryption/> ;
    schema:description "HomeエディションでもBitLockerと同じ技術を使う「デバイスの暗号化」は利用できる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/device-encryption/> ;
    rdf:predicate ks:uses ;
    rdf:object <https://comcomponent.com/knowledge/clear-key/> ;
    schema:description "OOBE完了時点の暗号化は保護なしのクリアキーで行われ、条件を満たすサインインで保護が有効化される"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/local-account/> ;
    rdf:predicate ks:mayCause ;
    rdf:object <https://comcomponent.com/knowledge/unprotected-encryption/> ;
    schema:description "ローカルアカウントのみで使い続けると回復キーのバックアップ先がなく、保護が有効化されないままになる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/unprotected-encryption/> ;
    rdf:predicate ks:mayCause ;
    rdf:object <https://comcomponent.com/knowledge/device-loss-data-leak/> ;
    schema:description "暗号化されていても保護が有効でなければ、盗難時にデータを守る効果はない"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/uefi-secure-boot/> ;
    rdf:predicate ks:mayCause ;
    rdf:object <https://comcomponent.com/knowledge/recovery-mode/> ;
    schema:description "セキュアブート設定の変更は起動環境の測定値を変え、回復モードの引き金になる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/tpm/> ;
    rdf:predicate ks:mayCause ;
    rdf:object <https://comcomponent.com/knowledge/recovery-mode/> ;
    schema:description "TPMのクリアや自己テスト失敗など、TPM側の状態変化も回復モードの引き金になる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/hardware-replacement/> ;
    rdf:predicate ks:mayCause ;
    rdf:object <https://comcomponent.com/knowledge/recovery-mode/> ;
    schema:description "マザーボード交換やドライブの別PCへの移設は起動環境が変わるため回復モードに入る"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/recovery-key/> ;
    rdf:predicate ks:storedIn ;
    rdf:object <https://comcomponent.com/knowledge/printed-copy/> ;
    schema:description "自動バックアップ先がない環境では、印刷やファイル保存による手動の控えが最後の受け皿になる"@ja ;
    ks:evidence <https://support.microsoft.com/windows/find-your-bitlocker-recovery-key-6b71ad27-0b89-ea08-f143-056f5ab347d6> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:uses ;
    rdf:object <https://comcomponent.com/knowledge/used-space-only/> ;
    schema:description "新品ドライブでは使用済み領域のみ暗号化を選ぶと初回の所要時間を大きく短縮できる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/operations-guide> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/repair-maintenance/> ;
    rdf:predicate ks:mayCause ;
    rdf:object <https://comcomponent.com/knowledge/recovery-key-exposure/> ;
    schema:description "修理・保守で回復キーを第三者に伝えると、そのキーは漏えいしたものとして扱う必要がある"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/operations-guide> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/key-rotation/> ;
    rdf:predicate ks:mitigates ;
    rdf:object <https://comcomponent.com/knowledge/recovery-key-exposure/> ;
    schema:description "新しい回復パスワードを追加してバックアップ成功を確認してから開示済みのものを削除すれば、漏えいの影響を断ち切れる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/operations-guide> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/pc-disposal/> ;
    rdf:predicate ks:requires ;
    rdf:object <https://comcomponent.com/knowledge/data-erasure/> ;
    schema:description "暗号化していても廃棄・売却時は、NIST SP 800-88が定義するような検証可能な消去手順(初期化・消去ツール・物理破壊)が別途必要"@ja ;
    ks:evidence <https://csrc.nist.gov/pubs/sp/800/88/r2/final> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/data-erasure/> ;
    rdf:predicate ks:prevents ;
    rdf:object <https://comcomponent.com/knowledge/device-loss-data-leak/> ;
    schema:description "検証可能な形でデータを消してから手放すことで、廃棄・売却経由の流出を防ぐ"@ja ;
    ks:evidence <https://csrc.nist.gov/pubs/sp/800/88/r2/final> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker/> ;
    rdf:predicate ks:mayCause ;
    rdf:object <https://comcomponent.com/knowledge/encryption-overhead/> ;
    schema:description "暗号化によるI/O性能への影響はあるが、現代のPCでは体感に響くことはまれ"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/configure> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker-suspend/> ;
    rdf:predicate ks:shouldPrecede ;
    rdf:object <https://comcomponent.com/knowledge/firmware-update/> ;
    schema:description "ファームウェア更新・セキュアブート設定変更などの計画作業は、保護の一時停止を済ませてから行うのが定石"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/key-backup-policy/> ;
    rdf:predicate ks:shouldPrecede ;
    rdf:object <https://comcomponent.com/knowledge/bitlocker/> ;
    schema:description "「回復情報が保存されるまでBitLockerを有効にしない」構成を先に入れ、バックアップ成功を有効化に先行させる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/configure> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/key-rotation/> ;
    rdf:predicate ks:recommendedFor ;
    rdf:object <https://comcomponent.com/knowledge/recovery-key-exposure/> ;
    schema:description "回復キーを第三者に渡した・回復に使った後は、新パスワード追加→バックアップ成功確認→旧パスワード削除の手順での再発行が推奨"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/operations-guide> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/key-rotation/> ;
    rdf:predicate ks:requires ;
    rdf:object <https://comcomponent.com/knowledge/key-backup-policy/> ;
    schema:description "Entra ID参加デバイスの自動ローテーションは、回復情報のバックアップを必須にするポリシーが構成されているときにだけ機能する"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/configure> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/device-encryption/> ;
    rdf:predicate ks:verifiedBy ;
    rdf:object <https://comcomponent.com/knowledge/msinfo32/> ;
    schema:description "「デバイスの暗号化のサポート」の行で自機が前提条件を満たすかを確認できる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/password-protector/> ;
    rdf:predicate ks:notRecommendedFor ;
    rdf:object <https://comcomponent.com/knowledge/bitlocker/> ;
    schema:description "ロックアウトの仕組みがなく総当たりに弱いため既定で無効化されている。TPMまたはスタートアップキー方式を使う"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/personal-account-storage/> ;
    rdf:predicate ks:mayCause ;
    rdf:object <https://comcomponent.com/knowledge/recovery-key-loss/> ;
    schema:description "会社PCの回復キーが担当者個人のアカウントにしかない状態は、退職・異動で取り出せなくなる"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "context-dependent" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/recovery-key/> ;
    rdf:predicate ks:verifiedBy ;
    rdf:object <https://comcomponent.com/knowledge/recovery-key-id/> ;
    schema:description "回復画面に表示されるIDの先頭8桁を保存済みキーのIDと突き合わせ、正しいキーを特定する"@ja ;
    ks:evidence <https://support.microsoft.com/windows/find-your-bitlocker-recovery-key-6b71ad27-0b89-ea08-f143-056f5ab347d6> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/recovery-key/> ;
    rdf:predicate ks:verifiedBy ;
    rdf:object <https://comcomponent.com/knowledge/manage-bde/> ;
    schema:description "manage-bde -protectors -get で48桁の回復パスワードとそのIDを確認できる。後からのバックアップ(BackupToAAD等)もIDを使う"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/operations-guide> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/cipher-choice/> ;
    rdf:predicate ks:shouldPrecede ;
    rdf:object <https://comcomponent.com/knowledge/bitlocker/> ;
    schema:description "暗号化方式を後から変えるには復号→再暗号化が必要なため、有効化の前に決め切る"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/configure> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/bitlocker-pin/> ;
    rdf:predicate ks:incompatibleWith ;
    rdf:object <https://comcomponent.com/knowledge/unattended-pc/> ;
    schema:description "起動のたびに人手のPIN入力が要るため、無人再起動が前提の装置PC・キオスクPCには向かない"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/encrypted-master-image/> ;
    rdf:predicate ks:notRecommendedFor ;
    rdf:object <https://comcomponent.com/knowledge/clone-deployment/> ;
    schema:description "回復パスワードは作成したデバイスに固有のため、保護有効化済みイメージは複製せず、展開後にPCごとに有効化する"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker/recovery-overview> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .

[] a rdf:Statement ;
    rdf:subject <https://comcomponent.com/knowledge/dpapi/> ;
    rdf:predicate ks:recommendedFor ;
    rdf:object <https://comcomponent.com/knowledge/app-secrets/> ;
    schema:description "ログオン済みのマシンではドライブは復号されて見えるため、接続文字列やAPIキーはBitLockerではなくDPAPI等で守る"@ja ;
    ks:evidence <https://learn.microsoft.com/windows/win32/seccng/cng-dpapi> ;
    ks:verifiedAt "2026-08-01" ;
    ks:certainty "established" .