; and (C) contain language prohibiting an employee of the Cybersecurity and Infrastructure Security Agency from improperly utilizing pre-decisional or draft deliberative information such employee may be privy to or aware of related to Department of Homeland Security programing, budgeting, resourcing, acquisition, or procurement for the benefit or advantage of the private sector entity at which such employee is temporarily assigned. (2) Collection of costs (A) In general An amount for which an employee is liable under paragraph (1)(B) shall be treated as a debt due the United States. (B) Waiver The Director may waive, in whole or in part, collection of a debt described in subparagraph (A) based on a determination that the collection would be against equity and good conscience and not in the best interests of the United States, after taking into account any indication of fraud, misrepresentation, fault, or lack of good faith on the part of the employee concerned. (e) Termination An assignment under the program may, at any time and for any reason, be terminated by the Director of the Cybersecurity and Infrastructure Security Agency or the private sector entity concerned. (f) Duration (1) In general An assignment under the program shall be for a period of not less than one year and not more than three years. (2) CISA employees No employee of the Cybersecurity and Infrastructure Security Agency may be assigned under the program for more than a total of four years inclusive of all such assignments. (g) Status of Federal employees assigned to private-Sector entities An employee of the Cybersecurity and Infrastructure Security Agency who is assigned to a private sector entity under the program shall be considered, during the period of such assignment, to be employed by the Cybersecurity and Infrastructure Security Agency for all purposes. (h) Mission continuity Before authorizing the temporary assignment of an employee of the Cybersecurity and Infrastructure Security Agency to a private sector entity under the program,