Non-console access starts only from an environment that complies with PCI DSS: the originating system satisfies the relevant PCI DSS requirements (hardening, patching, anti-malware and a local firewall), and the carrying network is run and managed by the solution provider and satisfies PCI DSS.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.