IPv6 running in Redhat 7

I am running Redhat Enterprise Linux 7.4 on an AWS derivative. I need to security harden my VMs.

Please note: some my Information Security People are not very smart. Their management loves to say NO!

I have disabled IPv6 from starting in grub. I have disable IPv6 in /etc/sysctl.d/

Now, here is my problem:
netstat -anp | grep ^tcp6
shows that sshd is listening on IPv6. There are 2 other ports that are running in the Kernel. Therefore, according the I.S. folks, IPv6 is still running.

Their proposed solution is to remove all of the unused IPv6 packages. (???)

I'll be dogged if I can find ANY IPv6 packages installed.

1) How do I "prove" that IPv6 is not running?
2) How do I get these guys off my case?
Thanks!