Specify the cryptographic policy for SSH into a file in the folder /etc/ssh/ssh_config.d/ The file name must start with a number lower than 50, and extension .conf

Scripts to secure you server:

https://github.com/massyn/centos-cis-benchmark