During iteration planning for a hybrid project, the team identifies a new technical risk: the third-party payment processing API they planned to integrate may not handle the expected transaction volume during peak periods. This could impact the current sprint goal and the upcoming release. Which TWO actions should the project manager take FIRST?

Add the risk to the product backlog as a high-priority user story

Work with the team to identify alternative payment processing solutions or technical workarounds

Conduct a spike to assess the API's actual capacity and performance limitations

Document the risk in the risk register with impact and probability assessments

Escalate to the vendor to demand performance guarantees

Remove the payment integration from the current sprint scope