Its usual for an external watchdog to be added for industrial applications that cannot be disable ( or fail to be enabled) by firmware/software.