sshd_config(5)
Specifically, the option
PermitRootLogin.
I would leave sshd running tbh. Even if you feel you don't need it, it will almost certainly save you in an emergency. As long as you have sane passwords (or perhaps, use keys and disable passwords), it's fine.