Draft a comprehensive security migration plan for a financial institution currently reliant on RSA-2048 for data at rest. The plan must transition the organization to a lattice-based cryptographic scheme (e.g., Kyber or Dilithium). Address key generation, certificate revocation, hybrid encryption phases during the transition, and backward compatibility requirements for legacy systems.