How to Detect and Secure Vulnerable Open Ports and Services

Question

What’s the most effective way to detect vulnerable open ports and services on a network? Once identified, what steps should be taken to secure them, especially if they are essential for business operations? Are tools like Nmap enough, or should I use more advanced vulnerability scanners?